feat: 合并边缘节点运维并完善 Surge 配置安全

迁入通用节点部署工具、离线交付页生成器和共用技能，隔离真实配置与交付产物。统一 Codex 与 Claude Code 开发约定，补充节点迁移与运维文档。

完善 FINAL、策略组引用、输入校验、Surge 字段编码与 AI DNS 例外保护，增加隔离测试和订阅验证工具。

验证：全量类型检查、44 项单测、前端构建、脚本语法、技能入口与凭据隔离检查均通过。

edge-nodes/fleet.example.json

@@ -0,0 +1,45 @@
+{
+  "updated": "YYYY-MM-DD",
+  "sites": [
+    {
+      "id": "example",
+      "code": "EX",
+      "country": "EX",
+      "city": "Example City",
+      "flag": "🌐",
+      "domain": "nodeA.example.com",
+      "provider": "Example Provider",
+      "region": "Example Region",
+      "tagline": "占位站点，填写后的副本放在 private/",
+      "spec": [["规格", "按实际填写"]],
+      "net": [["IPv4", "203.0.113.10"]],
+      "access": [["SSH 别名", "your-node"]],
+      "notes": ["此示例没有可用凭据；先在私有工作副本生成分享链接。"],
+      "bbr": "按实际记录",
+      "egress_direct": "203.0.113.10",
+      "panels": [
+        {
+          "name": "3x-ui",
+          "url": "https://gateway.nodeA.example.com/change-this-path/",
+          "user": "panel_you",
+          "pass": "REPLACE_WITH_PRIVATE_PASSWORD",
+          "note": "占位入口"
+        }
+      ],
+      "sites_plain": [["门面", "https://nodeA.example.com", "占位域名"]],
+      "creds": [["VMess UUID", "00000000-0000-4000-8000-000000000001", "占位身份"]],
+      "links_dir": "example-edge-node-docs/scripts/node-links",
+      "lines": [
+        {
+          "proto": "VMess",
+          "egress": "direct",
+          "transport": "TCP 443 · WebSocket",
+          "endpoint": "/assets",
+          "port": 57707,
+          "slug": "vmess-direct",
+          "has_link": true
+        }
+      ]
+    }
+  ]
+}