HEL-351: 修复夜间下拉/日期弹层、一次性初始密码领取与缩放滚动条

夜间控件改走现有 token 与 color-scheme，日期弹层锚定触发器并可翻转；
创建公司账号改为一次性可复制口令窗口，列表与后续接口不再回明文。

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: multica-agent <github@multica.ai>

tests/test_server_auth.py

@@ -540,6 +540,9 @@ class ServerAuthMatrixTests(unittest.TestCase):
         status, _, data = self.admin.get("/api/admin/users")
         self.assertEqual(200, status)
         bodies.append(data)
+        status, _, data = self.admin.get("/api/admin/companies")
+        self.assertEqual(200, status)
+        bodies.append(data)
         status, _, data = self.admin.get("/api/admin/audit-log?limit=100")
         self.assertEqual(200, status)
         bodies.append(data)
@@ -548,7 +551,9 @@ class ServerAuthMatrixTests(unittest.TestCase):
         status, _, data = self.cashier_a.get("/api/batches")
         bodies.append(data)
         for body in bodies:
-            self.assertNotIn("password_hash", body.decode("utf-8"))
+            text = body.decode("utf-8")
+            self.assertNotIn("password_hash", text)
+            self.assertNotIn("initial_password", text)
 
     def test_audit_log_contains_no_plaintext_passwords(self) -> None:
         connection = connect(self.db_path)