fix(miniapp): 提现/财务接口不再用 1001 演示身份，修复 403

- getUserProfile/getUserWithdrawals/getUserFinanceRecords 去掉 userId=1001 默认值，改由 normalizeUserId 解析登录身份

- withdraw.vue / withdraw-records.vue / workspace.vue 调用改为 normalizeUserId()，不再硬编码 1001

- normalizeUserId 将 1001 视为演示占位符：登录态下传 0 由 token 识别，未登录才兜底 1001

- request.js 遇 403 身份校验失败时清理错配登录态并提示重新登录（其它 403 权限拒绝不受影响）

- 登录态闸门补齐用例（108 套件/714 用例全绿）

server/tests/login-identity-consistency.spec.ts

@@ -26,4 +26,30 @@ describe('第九十批登录态一致性闸门', () => {
     expect(api).not.toContain('if (n === 101) return 2006;');
     expect(api).toContain('if (token) return valid ? n : 0;');
   });
+
+  it('1001 演示默认值不作为真实身份（登录态下回退 token 识别）', () => {
+    expect(api).toContain('Number(target) === 1001');
+    expect(api).toContain('n !== 1001');
+    expect(api).not.toContain('getUserWithdrawals(userId = 1001)');
+    expect(api).not.toContain('getUserFinanceRecords(userId = 1001)');
+    expect(api).not.toContain('getUserProfile(userId = 1001)');
+  });
+
+  it('提现/财务页面不再硬编码 1001 查询本人数据', () => {
+    for (const rel of [
+      'pwuniapp/pages/user/withdraw.vue',
+      'pwuniapp/pages/user/withdraw-records.vue',
+      'pwuniapp/pages/expert/workspace.vue',
+    ]) {
+      const src = fs.readFileSync(path.join(root, rel), 'utf-8');
+      expect(src).not.toContain('getUserWithdrawals(1001)');
+      expect(src).not.toContain('getUserProfile(1001)');
+    }
+  });
+
+  it('请求层遇身份校验失败 403 时清理错配登录态并提示重新登录', () => {
+    const request = fs.readFileSync(path.join(root, 'pwuniapp/common/request.js'), 'utf-8');
+    expect(request).toContain('40300 && /身份校验失败|无权以他人身份/');
+    expect(request).toContain('res.statusCode === 403 && /身份校验失败|无权以他人身份/');
+  });
 });