refactor: 服务层抽象下沉、异步锁全栈迁移、客户端韧性加固与移动端适配

- 服务层拆分：删除 api/helpers.rs，新增 citation/note/session/pipeline/paper/vision 独立服务模块
  - Agent 工具精简：paper_content+paper_outline 合并为 paper.rs，图片分析逻辑下沉至 services/vision
  - 并发模型升级：std::sync::{Mutex,RwLock} → tokio::sync::{Mutex,RwLock}，消除 async
  上下文中的阻塞风险
  - 客户端加固：HTTP 客户端统一超时配置、ADS 429 / arXiv 503 自动重试、构造函数返回 Result
  - 启动安全：全局 panic hook 日志化、空密码拒绝启动、向量表维度不匹配需显式确认
  - CLI 扩展：构建完整 AppState 复用服务层，新增 Content/Outline/Citations/Search/Process 子命令
  - 前端：移动端汉堡菜单、侧栏滑出面板、引用星系触屏手势（单指拖拽/双指缩放）

src/agent/runtime/executor/mod.rs

@@ -413,37 +413,7 @@ pub async fn execute_parallel(
 
                     // 存储待处理的权限请求
                     {
-                        let mut perms = match app_state.pending_permissions.lock() {
-                            Ok(p) => p,
-                            Err(e) => {
-                                warn!("[Executor] 权限系统内部错误: {}", e);
-                                let err_output =
-                                    format!("权限系统内部错误，工具 {} 被拒绝", prep.tool_name);
-                                let _ = tx.send(AgentStreamEvent::ToolResult {
-                                    tool_call_id: prep.tool_call_id.clone(),
-                                    name: prep.tool_name.clone(),
-                                    output: err_output.clone(),
-                                    is_error: true,
-                                    metadata: serde_json::json!({}),
-                                    step,
-                                });
-                                let err_msg =
-                                    ChatMessage::tool_result(&prep.tool_call_id, &err_output);
-                                save_tool_message_sync(db, &sid, turn_index, step, &err_msg);
-                                tool_messages.push(ToolResultMessage {
-                                    chat_message: err_msg,
-                                    was_error: true,
-                                });
-                                // 内部错误 → 记录拒绝追踪
-                                if let Some(dt) = denial_tracker {
-                                    if let Ok(mut tracker) = dt.lock() {
-                                        tracker.record_denial();
-                                    }
-                                }
-                                denied_indices.insert(i);
-                                continue;
-                            }
-                        };
+                        let mut perms = app_state.pending_permissions.lock().await;
                         perms.insert(
                             perm_id.clone(),
                             PendingPermission {
@@ -461,9 +431,7 @@ pub async fn execute_parallel(
                     let perm_result = tokio::time::timeout(timeout_dur, resp_rx).await;
 
                     // 清理待处理的权限请求
-                    if let Ok(mut perms) = app_state.pending_permissions.lock() {
-                        perms.remove(&perm_id);
-                    }
+                    app_state.pending_permissions.lock().await.remove(&perm_id);
 
                     match perm_result {
                         Ok(Ok(response)) if response.allowed => {
@@ -570,11 +538,10 @@ pub async fn execute_parallel(
     let cancel_handle = tokio::spawn(async move {
         loop {
             tokio::time::sleep(std::time::Duration::from_millis(250)).await;
-            if let Ok(locked) = app_state_ref.cancelled_runs.lock() {
-                if locked.contains(&sid_ref) {
-                    cancel_flag.store(true, Ordering::SeqCst);
-                    return;
-                }
+            let locked = app_state_ref.cancelled_runs.lock().await;
+            if locked.contains(&sid_ref) {
+                cancel_flag.store(true, Ordering::SeqCst);
+                return;
             }
         }
     });