fix(client-service): hide service/vm ids, mask vm password, encrypt module_vmware.password

- detail response drops id and vm.id/vmware_id, password returns *****
- GET client-service/{uuid}/vm-password returns the decrypted password to the owner
- renew accepts service uuid
- EncryptedOrLegacy cast for module_vmware.password
- vps specs: addon ram is stored in MB, convert to GB

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

routes/client.php

@@ -123,6 +123,7 @@ Route::prefix('v1')
                         Route::get('web-design', 'indexWebDesign')->name('web-design.list');
                         Route::get('domain', 'indexDomain')->name('domain.list');
                         Route::get('{uuid}', 'getDetail')->name('detail');
+                        Route::get('{uuid}/vm-password', 'getVmPassword')->middleware('throttle:20,1')->name('vm-password');
                         Route::get('{uuid}/console-ticket', 'getConsoleTicket')->name('console-ticket');
                         Route::get('{uuid}/available-os', 'getAvailableOs')->name('available-os');
                         Route::post('{uuid}/rebuild', 'rebuild')->name('rebuild');