feat: 合并边缘节点运维并完善 Surge 配置安全

迁入通用节点部署工具、离线交付页生成器和共用技能，隔离真实配置与交付产物。统一 Codex 与 Claude Code 开发约定，补充节点迁移与运维文档。

完善 FINAL、策略组引用、输入校验、Surge 字段编码与 AI DNS 例外保护，增加隔离测试和订阅验证工具。

验证：全量类型检查、44 项单测、前端构建、脚本语法、技能入口与凭据隔离检查均通过。

.claude/skills/edge-node-multi-protocol/scripts/06b-warp-watchdog.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Install the WARP health-check watchdog (systemd timer, every 60s).
+. "$(dirname "$0")/_lib.sh"
+HERE="$(cd "$(dirname "$0")" && pwd)"
+
+# adjust the proxy port in the shipped script to your configured one
+sed "s#127.0.0.1:40000#127.0.0.1:$WARP_SOCKS_PORT#g" "$HERE/warp-healthcheck.sh" | run "cat > /usr/local/bin/warp-healthcheck.sh"
+push "$HERE/warp-healthcheck.service" /etc/systemd/system/warp-healthcheck.service
+push "$HERE/warp-healthcheck.timer"   /etc/systemd/system/warp-healthcheck.timer
+run 'chmod +x /usr/local/bin/warp-healthcheck.sh
+     systemctl daemon-reload
+     systemctl enable --now warp-healthcheck.timer 2>&1 | tail -1
+     systemctl is-active warp-healthcheck.timer'