chore: 初始提交 Fonu 1.0.2

- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听）
- 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP）
- 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点）
- 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue

internal/nginx/cleanup_unix.go

@@ -0,0 +1,32 @@
+//go:build !windows
+
+package nginx
+
+import (
+	"context"
+	"os/exec"
+	"syscall"
+	"time"
+)
+
+func prepareStartPlatform(m *Manager, ctx context.Context) {
+	stopOrphanMasters(ctx, m)
+}
+
+func stopOrphanMasters(ctx context.Context, m *Manager) {
+	pid, err := readPIDFile(m.cfg.NginxPIDFile)
+	if err == nil && isPIDAlive(pid) {
+		_ = terminateProcess(pid, syscall.SIGTERM)
+		waitProcessExit(pid, nginxTerminateWait)
+		if isPIDAlive(pid) {
+			_ = terminateProcess(pid, syscall.SIGKILL)
+			waitProcessExit(pid, time.Second)
+		}
+	}
+	_ = m.runNginx(ctx, []string{"-c", m.cfg.NginxConfigPath(), "-s", "quit"}, "")
+	removePIDFile(m.cfg.NginxPIDFile)
+	if _, err := exec.LookPath("pkill"); err == nil {
+		_ = exec.Command("pkill", "-x", "nginx").Run()
+		time.Sleep(200 * time.Millisecond)
+	}
+}