fix(h5-shop): harden iOS WeChat scan after login with hard nav and recover UI

Root cause is JSSDK entry-URL mismatch after SPA post-OAuth, not camera permission. Hard-navigate on iOS, keep OAuth query in sign URL, skip redundant bind OAuth, and prompt refresh/re-auth on failure.

Co-authored-by: Cursor <cursoragent@cursor.com>

server/dukang-api/src/modules/common/wechat.controller.ts

@@ -83,17 +83,12 @@ export class WechatController {
     return this.wechat.createJssdkConfig(pageUrl, actorRef);
   }
 
+  /**
+   * 仅去 hash。勿剔除 code/state：
+   * iOS 微信用「document 入场 URL」验签，OAuth 回跳页的 query 必须原样参与签名。
+   */
   private normalizeJssdkUrl(rawUrl: string): string {
-    try {
-      const parsed = new URL(rawUrl);
-      parsed.hash = '';
-      parsed.searchParams.delete('code');
-      parsed.searchParams.delete('state');
-      const query = parsed.searchParams.toString();
-      return `${parsed.origin}${parsed.pathname}${query ? `?${query}` : ''}`;
-    } catch {
-      return rawUrl.split('#')[0];
-    }
+    return rawUrl.split('#')[0];
   }
 
   @Get('oauth-url')