chore: 初始提交 Fonu 1.0.2

- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听）
- 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP）
- 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点）
- 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue

internal/ddns/zone_test.go

@@ -0,0 +1,74 @@
+package ddns
+
+import (
+	"context"
+	"testing"
+)
+
+func TestResolveZoneForFQDNDelegatedSubdomain(t *testing.T) {
+	zones := map[string]bool{
+		"sub.example.com": true,
+	}
+	zone, host, err := ResolveZoneForFQDN(context.Background(), func(candidate string) (bool, error) {
+		return zones[candidate], nil
+	}, "sub.example.com")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if zone != "sub.example.com" || host != "@" {
+		t.Fatalf("unexpected zone=%s host=%s", zone, host)
+	}
+}
+
+func TestResolveZoneForFQDNPrefersLongestZone(t *testing.T) {
+	zones := map[string]bool{
+		"sub.example.com": true,
+		"example.com":     true,
+	}
+	zone, host, err := ResolveZoneForFQDN(context.Background(), func(candidate string) (bool, error) {
+		return zones[candidate], nil
+	}, "www.sub.example.com")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if zone != "sub.example.com" || host != "www" {
+		t.Fatalf("unexpected zone=%s host=%s", zone, host)
+	}
+}
+
+func TestResolveZoneForFQDNClassicSubdomain(t *testing.T) {
+	zones := map[string]bool{
+		"example.com": true,
+	}
+	zone, host, err := ResolveZoneForFQDN(context.Background(), func(candidate string) (bool, error) {
+		return zones[candidate], nil
+	}, "s.example.com")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if zone != "example.com" || host != "s" {
+		t.Fatalf("unexpected zone=%s host=%s", zone, host)
+	}
+}
+
+func TestResolveZoneForFQDNWildcard(t *testing.T) {
+	zones := map[string]bool{
+		"sub.example.com": true,
+	}
+	zone, host, err := ResolveZoneForFQDN(context.Background(), func(candidate string) (bool, error) {
+		return zones[candidate], nil
+	}, "*.sub.example.com")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if zone != "sub.example.com" || host != "*" {
+		t.Fatalf("unexpected zone=%s host=%s", zone, host)
+	}
+}
+
+func TestFQDNFromRecordStoredFQDN(t *testing.T) {
+	cfg := Config{RootDomain: "example.com"}
+	if FQDNFromRecord(cfg, "sub.example.com") != "sub.example.com" {
+		t.Fatal("expected stored fqdn preserved")
+	}
+}