refactor: 修复 modules 三层架构违规

- auth: actionDeleteAccount 改用 service+repo，forgot-password 完整三层实现
- card: serviceCheckCardOwnership 替代直接调用 repository
- deck: 移除 service 层的 use server 指令
- dictionary: 数据转换逻辑从 repository 移到 service
- ocr: 认证移到 action 层，跨模块调用改用 service
- translator: genIPA/genLanguage 改用 service 层

src/modules/card/card-action.ts

@@ -42,8 +42,8 @@ import {
   serviceGetCardStats,
   serviceDeleteCard,
   serviceGetCardByIdWithNote,
+  serviceCheckCardOwnership,
 } from "./card-service";
-import { repoGetCardDeckOwnerId } from "./card-repository";
 import { CardQueue } from "../../../generated/prisma/enums";
 
 const log = createLogger("card-action");
@@ -161,8 +161,7 @@ async function checkCardOwnership(cardId: bigint): Promise<boolean> {
   const session = await auth.api.getSession({ headers: await headers() });
   if (!session?.user?.id) return false;
 
-  const ownerId = await repoGetCardDeckOwnerId(cardId);
-  return ownerId === session.user.id;
+  return serviceCheckCardOwnership({ cardId, userId: session.user.id });
 }
 
 async function getCurrentUserId(): Promise<string | null> {