feat(service): expand service layer with new domain operations

- Add IM service modules: audit, channel roles, custom emojis, forum
  tags, integrations, invitations, repo links, slash commands, stages,
  voice, webhooks
- Add PR service modules: review requests, templates
- Add repo service modules: contributors, release assets, git extras
  (archive, branch rename, commit extras, diff/merge, tag, tree)
- Add user service: social (follow/block)
- Add internal auth service
- Update existing service modules with expanded functionality
- Remove deleted IM modules: articles, delivery trace, drafts,
  follows, messages, polls, presence, reactions, threads

service/user/keys.rs

@@ -26,14 +26,23 @@ pub struct AddGpgKeyParams {
 }
 
 impl UserService {
-    pub async fn user_ssh_keys(&self, ctx: &Session) -> Result<Vec<UserSshKey>, AppError> {
+    pub async fn user_ssh_keys(
+        &self,
+        ctx: &Session,
+        limit: i64,
+        offset: i64,
+    ) -> Result<Vec<UserSshKey>, AppError> {
         let user_uid = ctx.user().ok_or(AppError::Unauthorized)?;
+        let limit = limit.clamp(1, 100);
+        let offset = offset.max(0);
         sqlx::query_as::<_, UserSshKey>(
             "SELECT id, user_id, title, public_key, fingerprint_sha256, key_type, last_used_at, \
              expires_at, revoked_at, created_at, updated_at FROM user_ssh_key \
-             WHERE user_id = $1 AND revoked_at IS NULL ORDER BY created_at DESC",
+             WHERE user_id = $1 AND revoked_at IS NULL ORDER BY created_at DESC LIMIT $2 OFFSET $3",
         )
         .bind(user_uid)
+        .bind(limit)
+        .bind(offset)
         .fetch_all(self.ctx.db.reader())
         .await
         .map_err(AppError::Database)
@@ -98,14 +107,23 @@ impl UserService {
         ensure_affected(result.rows_affected(), "key not found")
     }
 
-    pub async fn user_gpg_keys(&self, ctx: &Session) -> Result<Vec<UserGpgKey>, AppError> {
+    pub async fn user_gpg_keys(
+        &self,
+        ctx: &Session,
+        limit: i64,
+        offset: i64,
+    ) -> Result<Vec<UserGpgKey>, AppError> {
         let user_uid = ctx.user().ok_or(AppError::Unauthorized)?;
+        let limit = limit.clamp(1, 100);
+        let offset = offset.max(0);
         sqlx::query_as::<_, UserGpgKey>(
             "SELECT id, user_id, key_id, public_key, fingerprint, primary_email, expires_at, \
              verified_at, revoked_at, created_at, updated_at FROM user_gpg_key \
-             WHERE user_id = $1 AND revoked_at IS NULL ORDER BY created_at DESC",
+             WHERE user_id = $1 AND revoked_at IS NULL ORDER BY created_at DESC LIMIT $2 OFFSET $3",
         )
         .bind(user_uid)
+        .bind(limit)
+        .bind(offset)
         .fetch_all(self.ctx.db.reader())
         .await
         .map_err(AppError::Database)