fix(create): 参考内容 - 支持添加、独立删除与筛选管理

- 支持参考内容按稳定 ID 删除、筛选、清空、拖拽与触屏交互
- 保留 Vite 生产环境模型 Logo 加载并兼容 Bun 测试
- 同步最新 main，修正相关格式和陈旧测试断言

Co-authored-by: echoD886 <dingxiaojie66@gmail.com>

backend/internal/service/storage_s3_test.go

@@ -118,10 +118,11 @@ func TestS3EndpointAndDigestsEnforceStorageContract(t *testing.T) {
 }
 
 func TestOSSSettingKeepsS3SecretsWhenLocationChanges(t *testing.T) {
+	t.Setenv("CANVAS_ALLOWED_PRIVATE_UPSTREAM_HOSTS", "127.0.0.1")
 	current := ossSettingValue{
 		Provider:        s3Provider,
 		Region:          "us-east-1",
-		Endpoint:        "https://s3.example.com",
+		Endpoint:        "https://127.0.0.1",
 		Bucket:          "old-bucket",
 		AccessKeyID:     "access-id",
 		AccessKeySecret: "secret-value",
@@ -133,7 +134,7 @@ func TestOSSSettingKeepsS3SecretsWhenLocationChanges(t *testing.T) {
 		Provider:    s3Provider,
 		S3Preset:    "custom",
 		Region:      "us-east-1",
-		Endpoint:    "https://s3.example.com",
+		Endpoint:    "https://127.0.0.1",
 		Bucket:      "new-bucket",
 		AccessKeyID: "access-id",
 		PathPrefix:  "changed-prefix",