security: 补全剩余端点鉴权 + 移除硬编码管理员后门

1. 鉴权补全
   - orders.py: create_order 补全 Depends(get_current_user)
   - print.py: print_execute 和 update_printer_config 补全鉴权
   - records.py: update_record 和 delete_record 补全鉴权

2. 安全加固
   - auth_service.py: 移除硬编码超级管理员(IRIS/123321)后门
   - 所有用户统一通过MOM sys_user scrypt密码验证登录

backend/app/api/v1/endpoints/records.py

@@ -8,6 +8,7 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from app.core.database import get_db
 from app.models.task import TaskRecord
 from app.schemas.task import TaskRecordCreate, TaskRecordResponse
+from app.services.auth_service import get_current_user
 
 router = APIRouter(prefix="/records", tags=["任务记录"])
 
@@ -25,6 +26,7 @@ async def update_record(
     record_id: int,
     data: TaskRecordCreate,
     db: AsyncSession = Depends(get_db),
+    current_user: dict = Depends(get_current_user),
 ):
     """更新任务记录（备注+图片）"""
     record = await _get_record_or_404(db, record_id)
@@ -40,6 +42,7 @@ async def update_record(
 async def delete_record(
     record_id: int,
     db: AsyncSession = Depends(get_db),
+    current_user: dict = Depends(get_current_user),
 ):
     """删除任务记录"""
     record = await _get_record_or_404(db, record_id)