fix(captcha): 1:1 align bind-phone and real status contracts

Add bind_phone captcha scene across schema/runtime/UI, require captcha on
phone bind, return real captcha status objects instead of legacy option
aliases, and harden form discovery for page-sign auth forms.

inc/helpers/user-center-renderers/settings-security.php

@@ -36,6 +36,18 @@ defined('ABSPATH') || exit;
 			<button type="button" class="btn-primary btn-sm security-trigger" data-modal="email-modal">
 				<?php esc_html_e('更改', 'aksrt'); ?>
 			</button>
+			<div class="security-action-item">
+				<div class="security-action-info">
+					<span class="security-action-icon"><i class="fas fa-mobile-alt" aria-hidden="true"></i></span>
+					<div class="security-action-text">
+						<span class="security-action-title"><?php esc_html_e('绑定手机', 'aksrt'); ?></span>
+						<span class="security-action-desc"><?php esc_html_e('绑定手机号后可使用短信验证码登录', 'aksrt'); ?></span>
+					</div>
+				</div>
+				<button type="button" class="btn-primary btn-sm security-trigger" data-modal="phone-modal">
+					<?php esc_html_e('绑定', 'aksrt'); ?>
+				</button>
+			</div>
 		</div>
 	</div>
 </div>