chore: 清理 go.mod，移除本地 replace，db/reflux 锁定真实版本

上一个提交（User 默认实现移到 req/userx）之后 req 不再依赖 contracts，
连带它拉进来的一大堆间接依赖（grpc/viper/hcl/mcp-go 等）一起清掉了。
db/reflux 之前靠指向本地兄弟目录（../db-v2、../reflux）的 replace 绕开
版本解析，现在锁定成各自 master 最新的真实 commit，去掉 replace——本地
多仓库协同开发改用父目录的 go.work，不用再靠单个仓库自己的 replace。

go.mod

@@ -2,17 +2,9 @@ module git.fsdpf.net/go/req
 
 go 1.25.5
 
-replace (
-	git.fsdpf.net/go/condition => ../condition-v2
-	git.fsdpf.net/go/contracts => ../contracts-v2
-	git.fsdpf.net/go/db => ../db-v2
-	git.fsdpf.net/go/reflux => ../reflux
-)
-
 require (
-	git.fsdpf.net/go/contracts v0.0.0-00010101000000-000000000000
-	git.fsdpf.net/go/db v0.0.0-00010101000000-000000000000
-	git.fsdpf.net/go/reflux v0.0.0-00010101000000-000000000000
+	git.fsdpf.net/go/db v0.0.0-20260820090948-9c6bb5a83508
+	git.fsdpf.net/go/reflux v0.0.0-20260820092857-1f48635da3f1
 	github.com/DATA-DOG/go-sqlmock v1.5.0
 	github.com/go-chi/chi/v5 v5.0.12
 	github.com/samber/do/v2 v2.0.0
@@ -24,51 +16,15 @@ require (
 )
 
 require (
-	git.fsdpf.net/go/condition v0.0.0-00010101000000-000000000000 // indirect
-	git.fsdpf.net/go/utils v0.0.0-20240509025914-c03a9cb48aff // indirect
-	github.com/bufbuild/protocompile v0.4.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.0-20210816181553-5444fa50b93d // indirect
-	github.com/fsnotify/fsnotify v1.6.0 // indirect
 	github.com/go-sql-driver/mysql v1.7.1 // indirect
-	github.com/goccy/go-json v0.10.5 // indirect
-	github.com/golang/protobuf v1.5.2 // indirect
-	github.com/google/jsonschema-go v0.4.3 // indirect
-	github.com/google/uuid v1.6.0 // indirect
-	github.com/gorilla/websocket v1.5.0 // indirect
-	github.com/hashicorp/hcl v1.0.0 // indirect
-	github.com/jhump/protoreflect v1.15.1 // indirect
-	github.com/lestrrat-go/backoff/v2 v2.0.8 // indirect
-	github.com/lestrrat-go/blackmagic v1.0.0 // indirect
-	github.com/lestrrat-go/httpcc v1.0.1 // indirect
-	github.com/lestrrat-go/iter v1.0.1 // indirect
-	github.com/lestrrat-go/jwx v1.2.25 // indirect
-	github.com/lestrrat-go/option v1.0.0 // indirect
-	github.com/magiconair/properties v1.8.7 // indirect
-	github.com/mark3labs/mcp-go v0.54.1 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
 	github.com/mattn/go-sqlite3 v1.14.42 // indirect
-	github.com/mitchellh/mapstructure v1.5.0 // indirect
-	github.com/pelletier/go-toml/v2 v2.0.6 // indirect
-	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/samber/go-type-to-string v1.8.0 // indirect
-	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 // indirect
-	github.com/sashabaranov/go-openai v1.41.2 // indirect
-	github.com/spf13/afero v1.9.3 // indirect
-	github.com/spf13/jwalterweatherman v1.1.0 // indirect
-	github.com/spf13/pflag v1.0.5 // indirect
-	github.com/spf13/viper v1.15.0 // indirect
-	github.com/subosito/gotenv v1.4.2 // indirect
 	github.com/tidwall/match v1.1.1 // indirect
 	github.com/tidwall/pretty v1.2.0 // indirect
-	github.com/yosida95/uritemplate/v3 v3.0.2 // indirect
-	golang.org/x/crypto v0.38.0 // indirect
-	golang.org/x/net v0.21.0 // indirect
-	golang.org/x/sys v0.41.0 // indirect
 	golang.org/x/text v0.25.0 // indirect
-	google.golang.org/genproto v0.0.0-20221227171554-f9683d7f8bef // indirect
-	google.golang.org/grpc v1.52.0 // indirect
-	google.golang.org/protobuf v1.28.2-0.20230222093303-bc1253ad3743 // indirect
-	gopkg.in/ini.v1 v1.67.0 // indirect
+	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )