feat: 版本号按分支轨道分开管理，版本号配置收归管理员

master/develop 共用 release 轨（App_Store 打包构建号自增），feature 分支走
feature 轨（构建号永不自增，始终使用手填值），两条轨道的 App_Ver 各自独立。

- versions 改为 tracks 结构，旧的单轨/单值配置在加载时自动迁移进 release 轨
- 新增 config["branch_track"] 记录分支归属，缺省按分支名推断，可在分支管理页改
- 新增 PUT /api/config/branches/track；分支名含 / 时走请求体而非路径参数
- 修复 DELETE /api/config/branches/{name} 无法删除含 / 的分支（405）
- 版本号接口不再对普通用户开放，打包设置页整页改为管理员可见

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

tests/test_api_config.py

@@ -201,3 +201,64 @@ def test_update_versions_rejects_invalid_app_version(client, tmp_config):
     resp = client.put("/api/config/versions", json={"app_ver": "2.196"})
     assert resp.status_code == 400
     assert "App_Ver" in resp.json()["detail"]
+
+
+def test_versions_tracks_are_independent(client, tmp_config):
+    # 两条轨道的 App_Ver 各自独立，互不影响
+    assert client.put("/api/config/versions", json={"track": "release", "app_ver": "2.196.0"}).status_code == 200
+    assert client.put("/api/config/versions", json={"track": "feature", "app_ver": "2.100.0"}).status_code == 200
+
+    data = client.get("/api/config/versions").json()
+    assert data["tracks"]["release"]["app_ver"] == "2.196.0"
+    assert data["tracks"]["feature"]["app_ver"] == "2.100.0"
+    assert data["tracks"]["feature"]["build_ver"] == "2.100.0.0"
+    # 顶层字段镜像 release 轨，兼容旧客户端
+    assert data["app_ver"] == "2.196.0"
+
+
+def test_update_versions_rejects_unknown_track(client, tmp_config):
+    resp = client.put("/api/config/versions", json={"track": "beta", "app_ver": "2.196.0"})
+    assert resp.status_code == 400
+
+
+def test_legacy_versions_migrate_to_release_track(client, tmp_config):
+    import json
+    with open(tmp_config, "r", encoding="utf-8") as f:
+        cfg = json.load(f)
+    cfg["versions"] = {"app_ver": "2.195.0", "build_ver": "2.195.0.7"}
+    with open(tmp_config, "w", encoding="utf-8") as f:
+        json.dump(cfg, f)
+
+    data = client.get("/api/config/versions").json()
+    assert data["tracks"]["release"] == {
+        "app_ver": "2.195.0",
+        "build_ver": "2.195.0.7",
+        "build_map": {"2.195.0": 7},
+    }
+    # feature 轨以同一 App_Ver 初始化，构建号从 .0 起
+    assert data["tracks"]["feature"]["app_ver"] == "2.195.0"
+    assert data["tracks"]["feature"]["build_ver"] == "2.195.0.0"
+
+
+def test_branch_track_defaults_and_override(client, tmp_config):
+    assert client.post("/api/config/branches", json={"name": "develop"}).status_code == 200
+    assert client.post("/api/config/branches", json={"name": "feature/login"}).status_code == 200
+
+    tracks = client.get("/api/config/versions").json()["branch_track"]
+    assert tracks["develop"] == "release"
+    assert tracks["feature/login"] == "feature"
+
+    # 手动改归属
+    resp = client.put("/api/config/branches/track", json={"branch": "feature/login", "track": "release"})
+    assert resp.status_code == 200
+    assert client.get("/api/config/versions").json()["branch_track"]["feature/login"] == "release"
+
+    assert client.put("/api/config/branches/track", json={"branch": "nope", "track": "release"}).status_code == 404
+    assert client.put("/api/config/branches/track", json={"branch": "develop", "track": "beta"}).status_code == 400
+
+
+def test_delete_branch_with_slash_in_name(client, tmp_config):
+    assert client.post("/api/config/branches", json={"name": "feature/login"}).status_code == 200
+    resp = client.delete("/api/config/branches/feature%2Flogin")
+    assert resp.status_code == 200
+    assert "feature/login" not in client.get("/api/config/branches").json()