feat: 统一 Commilitia Drop 全客户端命名与分发

internal/jwtauth/claims.go

@@ -15,7 +15,7 @@ type Claims struct {
 	Avatar string   // X-Auth-Avatar (profile picture URL from the broker account); may be empty
 	Groups []string // X-Auth-Roles, comma-split
 	// Scope is the raw X-Auth-Scope: a global SSO user is "full"; a cdrop delegated
-	// session is "app:cdrop:<tier>". Tier() reads the capability grade off the end.
+	// session is "app:commilitia-drop:<tier>". Tier() reads the capability grade off the end.
 	Scope string
 	// DeviceID is X-Auth-Meta: the cdrop device_id this session was minted for — the
 	// join key to the devices row. Empty for an unmanaged caller (e.g. a global SSO
@@ -24,7 +24,7 @@ type Claims struct {
 }
 
 // ScopeTier returns the capability grade — the last colon-separated segment of a broker
-// scope ("app:cdrop:guest" → "guest", "full" → "full"). A tierless scope is its own tier.
+// scope ("app:commilitia-drop:guest" → "guest", "full" → "full"). A tierless scope is its own tier.
 // Shared by Claims.Tier() and the session-list overlay so the two never diverge.
 func ScopeTier(scope string) string {
 	if i := strings.LastIndex(scope, ":"); i >= 0 {