feat: 合并边缘节点运维并完善 Surge 配置安全

迁入通用节点部署工具、离线交付页生成器和共用技能，隔离真实配置与交付产物。统一 Codex 与 Claude Code 开发约定，补充节点迁移与运维文档。

完善 FINAL、策略组引用、输入校验、Surge 字段编码与 AI DNS 例外保护，增加隔离测试和订阅验证工具。

验证：全量类型检查、44 项单测、前端构建、脚本语法、技能入口与凭据隔离检查均通过。

.claude/skills/edge-node-multi-protocol/scripts/07-install-3xui.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Install 3x-ui and set the panel to listen on 127.0.0.1:XUI_PORT with your path/creds.
+. "$(dirname "$0")/_lib.sh"
+
+[ -n "${XUI_PASS:-}" ] || XUI_PASS="$(gen_pass 18)"
+echo "3X-UI PASSWORD (save to your password manager): $XUI_PASS"
+
+run "echo -e 'n' | bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh) >/dev/null 2>&1 || true
+  /usr/local/x-ui/x-ui setting -username '$XUI_USER' -password '$XUI_PASS' -port $XUI_PORT -webBasePath '$XUI_PATH' 2>&1 | tail -4
+  /usr/local/x-ui/x-ui setting -listenIP 127.0.0.1 2>&1 | tail -1
+  systemctl restart x-ui; sleep 4
+  echo '== status =='; systemctl is-active x-ui
+  ss -lnt | grep -q ':$XUI_PORT' && echo panel-listening-$XUI_PORT || echo 'WARN: panel not listening'"