- OAuth provider and payment gateway groups are collapsible and collapsed by default; remove dead expandWhen logic - Textarea fields support secret masking; mark alipay_privatekey as secret in JS and PHP schemas - Extract AksSecretClear shared by input and textarea secret fields - Replace inline styles in payment/post-list notice HTML with aksrt-hint / aksrt-warn classes Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>