fix: 修复user.findById方法意外暴露了隐私字段的问题

apps/backend/src/user/user.service.ts

@@ -58,16 +58,7 @@ export class UserService {
    */
   async findById(userId: string): Promise<UserPublicProfile | null> {
     return this.userRepository.findOne({
-      select: {
-        avatar: true,
-        createdAt: true,
-        email: true,
-        nickname: true,
-        username: true,
-        phone: true,
-        roles: true,
-        userId: true,
-      },
+      select: ['userId', 'username', 'nickname', 'phone', 'email', 'avatar', 'roles', 'createdAt'],
       where: {
         userId,
       },