AI 分析报告按用户隔离存储

个股/财务/复盘报告改为 data/user_data/reports/{username}/ 目录下，
API 端从 request.state.username 读取对应用户的报告。

Co-Authored-By: Claude <noreply@anthropic.com>

serve/backend/app/api/stock_analysis.py

@@ -191,13 +191,15 @@ class SaveReportRequest(BaseModel):
 
 @router.get("/reports")
 def list_reports(request: Request):
-    """获取全部历史报告(按时间降序,后端已裁剪到上限)。"""
-    return {"reports": stock_reports.list_reports()}
+    """获取当前用户的历史报告(按时间降序,后端已裁剪到上限)。"""
+    username = getattr(request.state, "username", None)
+    return {"reports": stock_reports.list_reports(username)}
 
 
 @router.post("/reports")
 def save_report(request: Request, req: SaveReportRequest):
     """保存一条报告。"""
+    username = getattr(request.state, "username", None)
     report = stock_reports.save_report({
         "symbol": req.symbol,
         "name": req.name,
@@ -206,12 +208,13 @@ def save_report(request: Request, req: SaveReportRequest):
         "summary": req.summary,
         "close": req.close,
         "levels": req.levels,
-    })
+    }, username)
     return {"ok": True, "report": report}
 
 
 @router.delete("/reports/{report_id}")
 def delete_report(request: Request, report_id: str):
     """删除一条报告。"""
-    ok = stock_reports.delete_report(report_id)
+    username = getattr(request.state, "username", None)
+    ok = stock_reports.delete_report(report_id, username)
     return {"ok": ok}