feat: Add new API controllers for progression events, room consumables, currencies, earnings distributions, screen share reports, subscription seasons, and UGC purchasables

- Implemented ProgressionEventsController to handle progression event retrieval and active events.
- Created RoomConsumablesController for listing and purchasing room consumables.
- Developed RoomCurrenciesController for managing room currencies, including creation, updates, and balance retrieval.
- Added RoomEarningsDistributionsController to fetch earnings distribution data for rooms.
- Introduced ScreenShareReportsController for reporting screen share incidents.
- Established SubscriptionSeasonsController to provide current subscription season details and rewards.
- Launched UgcPurchasablesController for managing user-generated content purchasables, including bulk operations.
- Added new data entities for customization and room economy, including custom avatar items, room currencies, and UGC purchasables.

DorkNet.Server/Startup/RequestTracingExtensions.cs

@@ -128,14 +128,15 @@ public static class RequestTracingExtensions
                 var trimmedRequest = safeRequest is null ? null
                     : (safeRequest.Length > 200 ? safeRequest[..200] + "..." : safeRequest);
                 var trimmedResponse = safeResponse.Length > 300 ? safeResponse[..300] + "..." : safeResponse;
+                var authPresence = DescribeAuthPresence(ctx.Request);
                 var level = thrown is not null || status >= 500 ? LogLevel.Error
                           : status >= 400 ? LogLevel.Warning
                           : LogLevel.Information;
 
                 reqLogger.Log(level, thrown,
-                    "[req] {Status} {Method} {Host}{Path}{Query} {ElapsedMs}ms contentType={ContentType} contentLength={ContentLength} req={ReqBody} resp={RespBody}",
+                    "[req] {Status} {Method} {Host}{Path}{Query} {ElapsedMs}ms auth={AuthPresence} contentType={ContentType} contentLength={ContentLength} req={ReqBody} resp={RespBody}",
                     status, ctx.Request.Method, ctx.Request.Host, ctx.Request.Path,
-                    ctx.Request.QueryString.Value ?? "", sw.ElapsedMilliseconds,
+                    ctx.Request.QueryString.Value ?? "", sw.ElapsedMilliseconds, authPresence,
                     ctx.Request.ContentType ?? "", ctx.Request.ContentLength,
                     trimmedRequest ?? "", trimmedResponse);
 
@@ -170,6 +171,15 @@ public static class RequestTracingExtensions
         "password|passwd|pwd|passwordhash|token|accesstoken|refreshtoken|idtoken|" +
         "secret|clientsecret|apikey|api_key|authorization|deviceauth|sessionkey";
 
+    private static string DescribeAuthPresence(HttpRequest request)
+    {
+        var hasAuthHeader = request.Headers.ContainsKey("Authorization");
+        var hasBearer = request.Headers.Authorization.ToString()
+            .StartsWith("Bearer ", StringComparison.OrdinalIgnoreCase);
+        var hasAccessCookie = request.Cookies.ContainsKey(AuthService.AccessCookieName);
+        return $"header={hasAuthHeader};bearer={hasBearer};cookie={hasAccessCookie}";
+    }
+
     private static readonly Regex JsonSecretRegex = new(
         "(\"(?:" + SecretKeys + ")\"\\s*:\\s*)\"(?:[^\"\\\\]|\\\\.)*\"",
         RegexOptions.IgnoreCase | RegexOptions.Compiled);