Merge remote-tracking branch 'origin/qyqy_develop' into qyqy_develop

# Conflicts:
#	app/main.py

app/api/dependencies/auth.py

@@ -54,4 +54,11 @@ async def build_request_context(
         # 令牌非法、账号停用、角色读取失败一律按 401 处理，形态完全一致。
         raise unauthorized() from exc
     request.state.request_context = context
+    if not request.url.path.startswith("/api/v1/onboarding/"):
+        from app.service.risk_questionnaire_service import RiskQuestionnaireService
+
+        if await RiskQuestionnaireService().is_required(context):
+            from app.core.errors import OnboardingRequiredError
+
+            raise OnboardingRequiredError("请先完成开户风险测评问卷")
     return context