fix: data-action buttons, sources enabled, email notify, ticket detail single-page

- app.js: mount page objects via inline script (CSP blocks eval → data-action buttons dead)
- app.js: add tickets list entry to sidebar nav (admin could not find claimed tickets)
- sources: GET /sources?manage=1 returns enabled field for admin view
- mailer: sendNotifyEmail consumes email-type notification_configs (webhook_url = recipients)
- tickets: trigger notify on created/claimed/transferred/updated/status-change
- notifications: email type shows recipient field, validates email list
- ticket-detail: single-page chat flow (player/staff bubbles) + processing log timeline
- css: chat bubble styles

public/js/pages/sources.js

@@ -29,8 +29,8 @@ const SourcesPage = {
   async load() {
     const ct = document.getElementById('page-content');
     try {
-      // 管理视图: 含停用项
-      const rows = await API.get('/sources');
+      // 管理视图: 全量含 enabled(可显示/切换启用停用)
+      const rows = await API.get('/sources?manage=1');
       ct.innerHTML = rows.length === 0
         ? '<div class="empty"><i class="fas fa-tag"></i><p>暂无来源</p></div>'
         : `<div class="card table-wrap"><table><thead><tr><th>code</th><th>名称</th><th>排序</th><th>状态</th><th>操作</th></tr></thead><tbody>${rows.map(s => `