docs: add remaining review reports and docs

docs/onmyoji_gacha_review.md

@@ -0,0 +1,45 @@
+# onmyoji_gacha Code Review Report
+**Date**: 2026-05-10
+**Files Reviewed**: 7 files, ~2318 lines
+**Overall Grade**: B+ (Good quality, minor issues)
+
+## Issues Found
+
+### HIGH Priority
+| # | File | Line | Category | Issue | Fix |
+|---|------|------|----------|-------|-----|
+| 1 | config.py | 107 | SECURITY | 硬编码默认ADMIN_TOKEN，生产环境安全风险 | 添加运行时检查，生产环境强制覆盖 |
+| 2 | api_utils.py | 48 | RELIABILITY | requests.get() 无timeout，网络故障时阻塞 | 添加 timeout=10 参数 |
+
+### MEDIUM Priority  
+| # | File | Line | Category | Issue | Fix |
+|---|------|------|----------|-------|-----|
+| 3 | web_api.py | 56 | RELIABILITY | session.execute() 无异常保护 | 添加 try/except |
+| 4 | data_manager.py | N/A | CONCURRENCY | SQLite无线程锁保护 | 考虑添加 threading.Lock |
+| 5 | __init__.py | N/A | CODE QUALITY | 全局实例无生命周期管理 | 现状可接受 |
+
+### LOW Priority / Observations
+- **Code Quality**: 整体代码结构良好，错误处理完善
+- **Logging**: 日志覆盖合理，关键操作有日志记录
+- **Comments**: 注释清晰，函数文档完整
+- **Tests**: 建议添加单元测试覆盖核心抽卡逻辑
+
+## Recommendations
+1. **必须修复**: Issue #1, #2 (生产安全/稳定性)
+2. **建议修复**: Issue #3 (API异常处理)
+3. **可选改进**: Issue #4, #5
+
+## Files Summary
+| File | Lines | Issues | Grade |
+|------|-------|--------|-------|
+| config.py | 121 | 1 HIGH | B |
+| utils.py | 42 | 0 | A- |
+| api_utils.py | 252 | 1 HIGH | B |
+| web_api.py | 200 | 1 MEDIUM | B+ |
+| gacha.py | 307 | 0 | A- |
+| data_manager.py | 594 | 1 MEDIUM | B+ |
+| __init__.py | 802 | 1 MEDIUM | B+ |
+
+---
+**Reviewer**: Code Review Agent
+**Next Steps**: Apply fixes for Issue #1, #2, #3