fix: verify-password 400 error — replace broad /api/auth/ public path with explicit list

cfc-backend/src/main/java/com/etotem/cfc/config/JwtInterceptor.java

@@ -25,8 +25,17 @@ public class JwtInterceptor implements HandlerInterceptor {
     private UserMapper userMapper;
 
     private static final String[] PUBLIC_PATHS = {
-        "/api/auth/",
+        "/api/auth/send-code",
+        "/api/auth/phone-login",
+        "/api/auth/wechat-phone-login",
+        "/api/auth/silent-login",
+        "/api/auth/auto-login",
+        "/api/auth/register-with-idcard",
+        "/api/auth/wechat-login",
         "/api/auth/verify",
+        "/api/auth/check-phone",
+        "/api/auth/direct-register",
+        "/api/auth/register-with-invite",
         "/api/internal/",
         "/api/product/list",
         "/api/product/detail",