重构: tool_registry拆分及多批改进

crates/df-storage/src/secret.rs

@@ -89,7 +89,7 @@ fn clear_migration_failcount(id: &str) {
 }
 
 fn entry_for(id: &str) -> anyhow::Result<Entry> {
-    Entry::new(KEYRING_SERVICE, id).map_err(|e| anyhow::anyhow!("keyring entry 创建失败: {}", e))
+    Entry::new(KEYRING_SERVICE, id).map_err(|e| anyhow::anyhow!("keyring entry 创建失败(provider={}): {}", id, e))
 }
 
 /// 读取 provider 密钥(优先 keyring;无则 None)
@@ -112,13 +112,13 @@ pub fn resolve_provider_secret(record: &AiProviderRecord) -> String {
 /// 写入密钥到 keyring(覆盖)
 pub fn set_provider_secret(id: &str, key: &str) -> anyhow::Result<()> {
     let entry = entry_for(id)?;
-    entry.set_password(key).map_err(|e| anyhow::anyhow!("keyring 写入失败: {}", e))
+    entry.set_password(key).map_err(|e| anyhow::anyhow!("keyring 写入失败(provider={}): {}", id, e))
 }
 
 /// 删除 keyring 密钥(provider 删除时清理)
 pub fn delete_provider_secret(id: &str) -> anyhow::Result<()> {
     let entry = entry_for(id)?;
-    entry.delete_credential().map_err(|e| anyhow::anyhow!("keyring 删除失败: {}", e))
+    entry.delete_credential().map_err(|e| anyhow::anyhow!("keyring 删除失败(provider={}): {}", id, e))
 }
 
 /// 启动一次性迁移:DB 明文 → keyring → DB 置空(失败保留明文下次重试,非阻断)