chore: 初始提交 Fonu 1.0.2

- 公网反代：Nginx 状态卡片（版本 / 运行状态 / 配置校验 / 端口监听）
- 部署设置第一、二梯队（HTTPS 开关、安全头、限流、连接数、仅中国大陆 IP）
- 隧道检测兼容 frps v0.68 / v0.71（V2 与旧版端点）
- 恢复被清空的 internal/frp/store.go、internal/api/ddns_handler.go、web/src/views/DdnsView.vue

internal/nginx/config_validate_test.go

@@ -0,0 +1,38 @@
+package nginx
+
+import "testing"
+
+func TestAssertValidSSLBlocksRejectsListenSSLWithoutCertificate(t *testing.T) {
+	content := `http {
+    server {
+        listen 8017 ssl;
+        listen [::]:8017 ssl;
+        server_name app.example.com;
+        location / {
+            proxy_pass http://127.0.0.1:1;
+        }
+    }
+}
+`
+	if err := assertValidSSLBlocks(content); err == nil {
+		t.Fatal("expected invalid ssl block to fail validation")
+	}
+}
+
+func TestAssertValidSSLBlocksAcceptsCertificateAfterLocation(t *testing.T) {
+	content := `http {
+    server {
+        listen 8017 ssl;
+        server_name app.example.com;
+        location / {
+            proxy_pass http://127.0.0.1:1;
+        }
+        ssl_certificate /data/certs/wildcard.example.com/fullchain.pem;
+        ssl_certificate_key /data/certs/wildcard.example.com/privatekey.pem;
+    }
+}
+`
+	if err := assertValidSSLBlocks(content); err != nil {
+		t.Fatalf("expected config with certificate directives to pass: %v", err)
+	}
+}