feat: 添加Yggdrasil密码重置功能，更新依赖和配置

internal/handler/routes.go

@@ -37,6 +37,9 @@ func RegisterRoutes(router *gin.Engine) {
 
 			// 更换邮箱
 			userGroup.POST("/change-email", ChangeEmail)
+
+			// Yggdrasil密码相关
+			userGroup.POST("/yggdrasil-password/reset", ResetYggdrasilPassword) // 重置Yggdrasil密码并返回新密码
 		}
 
 		// 材质路由

internal/handler/user_handler.go

@@ -5,6 +5,7 @@ import (
 	"carrotskin/internal/service"
 	"carrotskin/internal/types"
 	"carrotskin/pkg/config"
+	"carrotskin/pkg/database"
 	"carrotskin/pkg/logger"
 	"carrotskin/pkg/redis"
 	"carrotskin/pkg/storage"
@@ -413,3 +414,49 @@ func ChangeEmail(c *gin.Context) {
 		UpdatedAt:   user.UpdatedAt,
 	}))
 }
+
+// ResetYggdrasilPassword 重置Yggdrasil密码
+// @Summary 重置Yggdrasil密码
+// @Description 重置当前用户的Yggdrasil密码并返回新密码
+// @Tags user
+// @Accept json
+// @Produce json
+// @Security BearerAuth
+// @Success 200 {object} model.Response "重置成功"
+// @Failure 401 {object} model.ErrorResponse "未授权"
+// @Failure 500 {object} model.ErrorResponse "服务器错误"
+// @Router /api/v1/user/yggdrasil-password/reset [post]
+func ResetYggdrasilPassword(c *gin.Context) {
+	loggerInstance := logger.MustGetLogger()
+	db := database.MustGetDB()
+
+	// 从上下文获取用户ID
+	userID, exists := c.Get("user_id")
+	if !exists {
+		c.JSON(http.StatusUnauthorized, model.NewErrorResponse(
+			model.CodeUnauthorized,
+			"未授权",
+			nil,
+		))
+		return
+	}
+
+	userId := userID.(int64)
+
+	// 重置Yggdrasil密码
+	newPassword, err := service.ResetYggdrasilPassword(db, userId)
+	if err != nil {
+		loggerInstance.Error("[ERROR] 重置Yggdrasil密码失败", zap.Error(err), zap.Int64("userId", userId))
+		c.JSON(http.StatusInternalServerError, model.NewErrorResponse(
+			model.CodeServerError,
+			"重置Yggdrasil密码失败",
+			nil,
+		))
+		return
+	}
+
+	loggerInstance.Info("[INFO] Yggdrasil密码重置成功", zap.Int64("userId", userId))
+	c.JSON(http.StatusOK, model.NewSuccessResponse(gin.H{
+		"password": newPassword,
+	}))
+}