Improve local auth env handling and fallbacks

Allow local env files to reliably override authentication feature flags (SMS/WeChat) by whitelisting keys in scripts/dev-utils.mjs and adding a unit test. Add SMS checks to scripts/check-api-server-env.mjs. Make server config.parse_bool tolerant of shell-wrapped quoted values (e.g. '"true"') and add tests so SMS_AUTH_ENABLED is parsed correctly when shells supply quotes. Update docs to clarify SMS env behaviour, restart requirements, and add guidance + a CSS fallback for old mobile browsers (QQ/X5) so public cover images render even when aspect-ratio is unsupported. Also include related frontend test and component adjustments and add puzzle onboarding handlers/endpoints in server-rs/crates/api-server/src/puzzle.rs.

src/components/rpg-entry/rpgEntryWorldPresentation.test.ts

@@ -13,7 +13,9 @@ import {
   mapBabyObjectMatchDraftToPlatformGalleryCard,
   mapVisualNovelWorkToPlatformGalleryCard,
   type PlatformEdutainmentGalleryCard,
+  type PlatformPuzzleGalleryCard,
   resolvePlatformPublicWorkCode,
+  resolvePlatformWorldFallbackCoverImage,
 } from './rpgEntryWorldPresentation';
 
 test('formatPlatformWorldTime formats backend seconds timestamp text as date', () => {
@@ -46,6 +48,32 @@ test('platform work display text limits names and tags by character count', () =
   ).toEqual(['超长机关', '星桥']);
 });
 
+test('platform public cards use play type reference images as cover fallback', () => {
+  const puzzleCard: PlatformPuzzleGalleryCard = {
+    sourceType: 'puzzle',
+    workId: 'puzzle-work-1',
+    profileId: 'puzzle-profile-1',
+    publicWorkCode: 'PZ-PUZZLE1',
+    ownerUserId: 'user-1',
+    authorDisplayName: '玩家',
+    worldName: '机关拼图',
+    subtitle: '拼图关卡',
+    summaryText: '公开作品',
+    coverImageSrc: '/generated-puzzle-assets/session/cover/image.png',
+    themeTags: ['拼图'],
+    playCount: 1,
+    remixCount: 0,
+    likeCount: 0,
+    visibility: 'published',
+    publishedAt: '2026-05-18T00:00:00.000Z',
+    updatedAt: '2026-05-18T00:00:00.000Z',
+  };
+
+  expect(resolvePlatformWorldFallbackCoverImage(puzzleCard)).toBe(
+    '/creation-type-references/puzzle.webp',
+  );
+});
+
 test('buildPuzzleWorkCoverSlides prefers each level formal image', () => {
   const slides = buildPuzzleWorkCoverSlides({
     workId: 'work-1',