Security: Remove hardcoded credentials

- Remove hardcoded API URL and auth token from pool/coin_pool.go
- Update config.json.example with placeholder format
- Credentials should now be configured via config.json file

pool/coin_pool.go

@@ -19,7 +19,7 @@ type CoinPoolConfig struct {
 }
 
 var coinPoolConfig = CoinPoolConfig{
-	APIURL:   "http://43.128.34.180:30006/api/ai500/list?auth=admin123sadasd3r323",
+	APIURL:   "", // 将通过config.json配置或SetCoinPoolAPI()设置
 	Timeout:  30 * time.Second, // 增加到30秒
 	CacheDir: "coin_pool_cache",
 }
@@ -359,7 +359,7 @@ var oiTopConfig = struct {
 	Timeout  time.Duration
 	CacheDir string
 }{
-	APIURL:   "http://43.128.34.180:30006/api/oi/top?auth=admin123sadasd3r323",
+	APIURL:   "", // 将通过config.json配置或SetOITopAPI()设置
 	Timeout:  30 * time.Second,
 	CacheDir: "coin_pool_cache",
 }