Improve local auth env handling and fallbacks

Allow local env files to reliably override authentication feature flags (SMS/WeChat) by whitelisting keys in scripts/dev-utils.mjs and adding a unit test. Add SMS checks to scripts/check-api-server-env.mjs. Make server config.parse_bool tolerant of shell-wrapped quoted values (e.g. '"true"') and add tests so SMS_AUTH_ENABLED is parsed correctly when shells supply quotes. Update docs to clarify SMS env behaviour, restart requirements, and add guidance + a CSS fallback for old mobile browsers (QQ/X5) so public cover images render even when aspect-ratio is unsupported. Also include related frontend test and component adjustments and add puzzle onboarding handlers/endpoints in server-rs/crates/api-server/src/puzzle.rs.

src/components/rpg-entry/rpgEntryWorldPresentation.ts

@@ -446,6 +446,36 @@ export function resolvePlatformWorldCoverImage(entry: PlatformWorldCardLike) {
   return '';
 }
 
+export function resolvePlatformWorldFallbackCoverImage(
+  entry: PlatformWorldCardLike,
+) {
+  if (isPuzzleGalleryEntry(entry)) {
+    return '/creation-type-references/puzzle.webp';
+  }
+
+  if (isMatch3DGalleryEntry(entry)) {
+    return '/creation-type-references/match3d.webp';
+  }
+
+  if (isSquareHoleGalleryEntry(entry)) {
+    return '/creation-type-references/square-hole.webp';
+  }
+
+  if (isVisualNovelGalleryEntry(entry)) {
+    return '/creation-type-references/visual-novel.webp';
+  }
+
+  if (isBigFishGalleryEntry(entry)) {
+    return '/creation-type-references/big-fish.webp';
+  }
+
+  if (isEdutainmentGalleryEntry(entry)) {
+    return '/creation-type-references/creative-agent.webp';
+  }
+
+  return '/creation-type-references/rpg.webp';
+}
+
 export function resolvePlatformWorldCoverSlides(
   entry: PlatformWorldCardLike,
 ): PlatformPuzzleCoverSlide[] {