fix(admin): resolve moderation, gift, and admin-panel bugs from QA

- scam/fake: enforce mutual exclusivity (scam precedence) at TL conversion, admin command, and UI toggles; both flags could render as neither
- scam/fake flicker: persist scam/fake in the Redis user base cache so cache hits no longer drop the flags
- getSavedStarGifts: hidden (unsaved) gifts are now force-excluded for non-owner viewers; same guard for get-by-ref
- convertStarGift: map already-upgraded/owner-invalid/unavailable to a clean client error instead of 500
- channel force-settings: send only changed fields (partial patch) and re-sync toggles after reload, so one setting no longer resets another
- give gifts: removed custom collectible numbers (auto sequential only); locked sender to the system account 777000
- give gifts UI: fixed picker card spacing/right gap; static (hover-play) Lottie previews on emoji + picker to stop render lag; fixed emoji ID field overflow

internal/store/postgres/star_gift_upgrade.go

@@ -164,19 +164,6 @@ WHERE collectible_revision_id=$1 AND crafted
 			}
 
 			num := revision.Issued + 1
-			if req.Num > 0 {
-				if req.Num > revision.SupplyTotal {
-					return domain.ErrStarGiftCollectibleInvalid
-				}
-				var numTaken bool
-				if err := tx.QueryRow(ctx, `SELECT EXISTS (SELECT 1 FROM unique_star_gifts WHERE gift_id=$1 AND num=$2)`, locked.GiftID, req.Num).Scan(&numTaken); err != nil {
-					return fmt.Errorf("check collectible number availability: %w", err)
-				}
-				if numTaken {
-					return domain.ErrStarGiftCollectibleNumberTaken
-				}
-				num = req.Num
-			}
 			var uniqueID int64
 			if err := tx.QueryRow(ctx, `SELECT nextval('unique_star_gift_id_seq')`).Scan(&uniqueID); err != nil {
 				return fmt.Errorf("allocate unique star gift id: %w", err)

internal/store/redisstore/user_cache.go

@@ -41,6 +41,10 @@ type userBaseValue struct {
 	CountryCode string `json:"country_code"`
 	Verified    bool   `json:"verified"`
 	Support     bool   `json:"support"`
+	// scam / fake 同理必须随缓存往返：丢失会让缓存命中路径把带标记的账号输出成
+	// 普通账号，导致资料页 SCAM/FAKE 标记随缓存命中/未命中间歇性消失（与 bot 列同坑）。
+	Scam bool `json:"scam,omitempty"`
+	Fake bool `json:"fake,omitempty"`
 	// bot 字段必须随缓存往返：丢失会让缓存命中路径把 bot 输出成普通用户，
 	// 污染客户端本地缓存（TDesktop 的 bot 标记不可逆）。
 	Bot            bool `json:"bot,omitempty"`
@@ -78,6 +82,8 @@ func baseValueFromUser(u domain.User) userBaseValue {
 		CountryCode:                   u.CountryCode,
 		Verified:                      u.Verified,
 		Support:                       u.Support,
+		Scam:                          u.Scam,
+		Fake:                          u.Fake,
 		Bot:                           u.Bot,
 		BotInfoVersion:                u.BotInfoVersion,
 		PremiumUntil:                  u.PremiumUntil,
@@ -110,6 +116,8 @@ func (v userBaseValue) user() domain.User {
 		CountryCode:            v.CountryCode,
 		Verified:               v.Verified,
 		Support:                v.Support,
+		Scam:                   v.Scam,
+		Fake:                   v.Fake,
 		Bot:                    v.Bot,
 		BotInfoVersion:         v.BotInfoVersion,
 		PremiumUntil:           v.PremiumUntil,