refactor: 移除邮件功能

发信能力整体下线，唯一的调用方（忘记密码）前端也从来没接过。

- utils/shortcuts.py 删 send_email，连带四个 django.core.mail 相关 import
- account/tasks.py 整个删除，里面只有 send_email_async 一个 actor
- 删 ApplyResetPasswordAPI / ResetPasswordAPI 及其路由、serializer，
  User.reset_password_token 和 reset_password_token_expire_time 两个
  字段（account/0010）
- 删 SMTPAPI / SMTPTestAPI 及其路由、三个 SMTP serializer、
  SysOptions.smtp_config
- account/templates/reset_password_email.html

options/0003 数据迁移删掉库里的 smtp_config 行：_init_option 会为每个
OptionKey 建行，key 从代码里去掉后它会变成孤儿，而且配过 SMTP 的话
value 里存着明文密码。

保留 ResetUserPasswordAPI（管理端直接重置密码，不发信，前端在用）和
User.email（注册要填）。

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

account/views/oj.py

@@ -1,15 +1,12 @@
 import asyncio
 import os
-from datetime import timedelta
 from importlib import import_module
 
 from django.conf import settings
 from django.contrib import auth
 from django.db.models import Count, Q
-from django.template.loader import render_to_string
 from django.utils import timezone
 from django.utils.decorators import method_decorator
-from django.utils.timezone import now
 from django.views.decorators.csrf import csrf_exempt, ensure_csrf_cookie
 
 from options.options import SysOptions
@@ -24,11 +21,9 @@ from utils.shortcuts import datetime2str, rand_str
 from ..decorators import login_required
 from ..models import AdminType, User, UserProfile
 from ..serializers import (
-    ApplyResetPasswordSerializer,
     EditUserProfileSerializer,
     ImageUploadForm,
     RankInfoSerializer,
-    ResetPasswordSerializer,
     SSOSerializer,
     UserChangeEmailSerializer,
     UserChangePasswordSerializer,
@@ -37,7 +32,6 @@ from ..serializers import (
     UserProfileSerializer,
     UserRegisterSerializer,
 )
-from ..tasks import send_email_async
 
 
 class UserProfileAPI(AsyncAPIView):
@@ -216,61 +210,6 @@ class UserChangePasswordAPI(APIView):
             return self.error("Invalid old password")
 
 
-# DEPRECATED: 前端未调用 (2026-05-26)
-class ApplyResetPasswordAPI(APIView):
-    @validate_serializer(ApplyResetPasswordSerializer)
-    def post(self, request):
-        if request.user.is_authenticated:
-            return self.error("You have already logged in, are you kidding me? ")
-        data = request.data
-        captcha = Captcha(request)
-        if not captcha.check(data["captcha"]):
-            return self.error("Invalid captcha")
-        try:
-            user = User.objects.get(email__iexact=data["email"])
-        except User.DoesNotExist:
-            return self.error("User does not exist")
-        if user.reset_password_token_expire_time and 0 < int((user.reset_password_token_expire_time - now()).total_seconds()) < 20 * 60:
-            return self.error("You can only reset password once per 20 minutes")
-        user.reset_password_token = rand_str()
-        user.reset_password_token_expire_time = now() + timedelta(minutes=20)
-        user.save()
-        render_data = {
-            "username": user.username,
-            "website_name": SysOptions.website_name,
-            "link": f"{SysOptions.website_base_url}/reset-password/{user.reset_password_token}",
-        }
-        email_html = render_to_string("reset_password_email.html", render_data)
-        send_email_async.send(
-            from_name=SysOptions.website_name_shortcut,
-            to_email=user.email,
-            to_name=user.username,
-            subject="Reset your password",
-            content=email_html,
-        )
-        return self.success("Succeeded")
-
-
-# DEPRECATED: 前端未调用 (2026-05-26)
-class ResetPasswordAPI(APIView):
-    @validate_serializer(ResetPasswordSerializer)
-    def post(self, request):
-        data = request.data
-        captcha = Captcha(request)
-        if not captcha.check(data["captcha"]):
-            return self.error("Invalid captcha")
-        try:
-            user = User.objects.get(reset_password_token=data["token"])
-        except User.DoesNotExist:
-            return self.error("Token does not exist")
-        if user.reset_password_token_expire_time < now():
-            return self.error("Token has expired")
-        user.reset_password_token = None
-        user.set_password(data["password"])
-        user.save()
-        return self.success("Succeeded")
-
-
 # DEPRECATED: 前端未调用 (2026-05-26)
 class SessionManagementAPI(APIView):
     @login_required