domain/account.go: CredentialKMSKeyAlias → CredentialKeyAlias + 注释说明(非KMS) repository/account.go: 字段映射同步更新(SQL列名credential_kms_key_alias保持不变避免迁移) security/kms_service.go: 添加模块顶部注释,区分本地加密与真实KMS服务,明确ProviderType="local"为本地实现
domain/account.go: CredentialKMSKeyAlias → CredentialKeyAlias + 注释说明(非KMS) repository/account.go: 字段映射同步更新(SQL列名credential_kms_key_alias保持不变避免迁移) security/kms_service.go: 添加模块顶部注释,区分本地加密与真实KMS服务,明确ProviderType="local"为本地实现