fix: 模型思考模式配置 + Unicode 截断 + 审计修复 (13 files)

模型模式:
- 新增 LLMConfig/Source.ThinkingEnabled 配置，通过 ExtraBody
  控制 DeepSeek thinking mode，默认关闭
- SeedDefaults/ToConfig 读写 core.llm.thinking_enabled
- deepseek.lua 移除硬编码 temperature=0

Unicode 截断:
- truncateStr 改按 rune 计数，修复中文截断乱码

审计修复 (Critical):
- graph.go: defer rows.Close 在 for 循环 → 显式 Close (连接池泄漏)
- cli/openclaw/plugin.go: bare type assertion → comma-ok (panic)
- channel.go: payload["type"].(string) → comma-ok (panic)
- webui/handler.go: .(string) → fmt.Sprint (panic)
- agent.go: 添加 nil provider 错误返回

审计修复 (High):
- events/bus.go: copy handler slice under RLock (data race)
- webui/handler.go: SSE 通过 channel 串行化写入 (data race)
- timer/plugin.go: time.Sleep → select with stopCh (Stop 阻塞)
- provider.go: stream ch <- 添加 select ctx.Done (goroutine 泄漏)
- main.go: outputCh goroutine 添加 ctx.Done 退出路径

cmd/homed/main.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"context"
 	"flag"
 	"log"
 	"os"
@@ -162,34 +163,45 @@ func main() {
 		log.Printf("[homed] text memory active at %s", filepath.Join(cfg.Daemon.DataDir, "memory", "text"))
 	}
 
+	ctx, stop := context.WithCancel(context.Background())
+	defer stop()
+
 	go func() {
-		for evt := range iom.OutputChan() {
-			if evt.Target == "memory" && evt.Type == "memory_candidate" {
-				source, _ := evt.Payload["source"].(string)
-				input, _ := evt.Payload["input"].(string)
-				response, _ := evt.Payload["response"].(string)
-				toolsUsed, _ := evt.Payload["tools_used"].([]string)
-				agentID, _ := evt.Payload["agent_id"].(string)
-
-				if input != "" && textMem != nil {
-					te := text.Event{
-						Timestamp: time.Now().Unix(),
-						Source:    source,
-						Input:     input,
-						Response:  response,
-						ToolsUsed: toolsUsed,
-						AgentID:   agentID,
-					}
-					if err := textMem.Append(te); err != nil {
-						log.Printf("[homed] text memory append: %v", err)
-					}
+		for {
+			select {
+			case <-ctx.Done():
+				return
+			case evt, ok := <-iom.OutputChan():
+				if !ok {
+					return
 				}
+				if evt.Target == "memory" && evt.Type == "memory_candidate" {
+					source, _ := evt.Payload["source"].(string)
+					input, _ := evt.Payload["input"].(string)
+					response, _ := evt.Payload["response"].(string)
+					toolsUsed, _ := evt.Payload["tools_used"].([]string)
+					agentID, _ := evt.Payload["agent_id"].(string)
 
-				if input != "" {
-					distiller.Append("agent", "user", input)
-				}
-				if response != "" {
-					distiller.Append("agent", "assistant", response)
+					if input != "" && textMem != nil {
+						te := text.Event{
+							Timestamp: time.Now().Unix(),
+							Source:    source,
+							Input:     input,
+							Response:  response,
+							ToolsUsed: toolsUsed,
+							AgentID:   agentID,
+						}
+						if err := textMem.Append(te); err != nil {
+							log.Printf("[homed] text memory append: %v", err)
+						}
+					}
+
+					if input != "" {
+						distiller.Append("agent", "user", input)
+					}
+					if response != "" {
+						distiller.Append("agent", "assistant", response)
+					}
 				}
 			}
 		}
@@ -345,6 +357,7 @@ func main() {
 		ContextSavePath: filepath.Join(cfg.Daemon.DataDir, "memory", "context.json"),
 		StageHost:       stageHost,
 		EventBus:        evBus,
+		ThinkingEnabled: cfg.LLM.ThinkingEnabled,
 	})
 	agent.Start()
 	defer agent.Stop()