chore(main): 回流 release/v2.0.x（v2.0.12）—— 内容对齐，main 无独有内容

按发布纪律回流。**注意这是内容对齐而非 merge**，理由与依据：

1. 纪律禁止 merge 回主干，因为 merge 会把发布分支的**版本号变更**带进 main。
   本项目版本号**只由 `git describe --tags` 推导**（Makefile VERSION），
   仓库里没有任何文件存放版本号 ⇒ 回流不存在版本污染风险。
2. 逐项核对确认 **main 是 release 的内容严格子集**：
   - `main` 独有的**文件**：0 个；
   - `internal/lua/plugins.go` / `internal/core/kernel_actions.go` 等内核文件
     main 独有行数：0；
   - `deploy.sh` 那 14 行只是 emoji 清理（release 刻意去掉了 emoji）；
   - `channels.lua` 那 333 行是**旧版内容**（旧 exports 表、旧模型名单）。
   - main 独有的 9 个提交按 patch-id **全部已在 release 中等效存在**
     （`git cherry` 逐条列出均为 `-`，即已合入）。
3. 故回流 = 把 release 的内容带到 main，等价于"只捡拾修复、不带版本号"，
   且不会丢任何 main 独有的修复。

本次带回 v2.0.12 的全部内容（37 个提交）：
- 源串行 + 按模型节流（照 model-gate）
- 已失效模型存储 + 远端目录闸门
- 余额分档选号
- 模型能力元数据（models.dev，isFree 权威判定）
- **凭据续期修复**（此前恒报 ok:true 却一个请求都不发）
- 通用件 TTL 缓存 + 串行锁；account_test/account_adopt/account_delete 修正
- 内核级：出站授权持久化重启后不生效、`__llmsproxy_plugin_dir` ground truth

校验：`git diff release/v2.0.x` = 0 行；`go build -tags luajit ./...` 通过。

packaging/config.example.yaml

@@ -3,7 +3,7 @@
 # 这个是打包进发行包、供首次安装使用的模板。它故意不含任何可用的凭据：
 # 首次启动时程序会生成一个随机 admin key 并写入实际配置（WebUI「密钥」页可见）。
 #
-# ⚠ 不要在本文件里填一个写死的具体 key。示例文件是公开的，写进去的任何值
+# 注意： 不要在本文件里填一个写死的具体 key。示例文件是公开的，写进去的任何值
 #    都会成为一个全网皆知的 admin key（旧版示例里的 sk-gw-local-0001 就踩过
 #    这个坑：它被直接抄进生产配置并真实可用）。
 

packaging/core-dist.sh

@@ -103,7 +103,7 @@ for f in "$DIST"/llmsproxy_*.deb "$DIST"/llmsproxy-*.rpm "$DIST"/*.tar.gz; do
   [ -f "$f" ] || continue
   sz=$(stat -c%s "$f")
   [ "$sz" -gt 100000 ] || { echo "[core-dist] FATAL: $f suspiciously small ($sz B)"; exit 1; }
-  log "  ✓ $f ($((sz/1024)) KB)"
+  log "  OK $f ($((sz/1024)) KB)"
 done
 # dpkg-deb takes ONE archive; every extra argument is read as an additional
 # control-component name. With the glob unquoted this used to expand to three
@@ -133,7 +133,7 @@ for want in llmsproxy config.example.yaml llmsproxy.service plugins/billing.lua;
     echo "            (release notes claim the billing plugin ships with the core)"
     exit 1
   fi
-  log "  ✓ archive contains $want"
+  log "  OK archive contains $want"
 done
 # Directories are matched by their CONTENTS, not by name: tar written with
 # `tar -czf` from a populated tree lists "…/adapters/openai.lua" and never a bare
@@ -144,6 +144,6 @@ if [ "$n_adapters" -lt 10 ]; then
   echo "[core-dist] FATAL: archive has only $n_adapters adapters (expected >= 10)"
   exit 1
 fi
-log "  ✓ archive contains $n_adapters adapters"
+log "  OK archive contains $n_adapters adapters"
 
 log "done: $DIST"

packaging/install-browser-stack.sh

@@ -53,7 +53,7 @@ if command -v python3 >/dev/null 2>&1; then
 fi
 
 if [ ${#missing[@]} -eq 0 ]; then
-    echo "✓ 浏览器栈依赖齐全"
+    echo "OK 浏览器栈依赖齐全"
     echo "  chromium: ${chromium}"
     echo "  noVNC:    ${novnc}"
     exit 0
@@ -98,24 +98,24 @@ echo
 echo "复核安装结果："
 ok=1
 for b in "${BINS[@]}"; do
-    if command -v "$b" >/dev/null 2>&1; then echo "  ✓ $b"
-    else echo "  ✗ $b"; ok=0; fi
+    if command -v "$b" >/dev/null 2>&1; then echo "  OK $b"
+    else echo "  FAIL $b"; ok=0; fi
 done
 chromium=""
 for c in "${CHROMIUM_CANDIDATES[@]}"; do
     if command -v "$c" >/dev/null 2>&1; then chromium="$c"; break; fi
 done
-[ -n "$chromium" ] && echo "  ✓ $chromium" || { echo "  ✗ chromium"; ok=0; }
+[ -n "$chromium" ] && echo "  OK $chromium" || { echo "  FAIL chromium"; ok=0; }
 novnc=""
 for d in "${NOVNC_DIRS[@]}"; do
     [ -f "$d/vnc.html" ] && { novnc="$d"; break; }
 done
-[ -n "$novnc" ] && echo "  ✓ noVNC ($novnc)" || { echo "  ✗ noVNC"; ok=0; }
-python3 -c 'import websocket' >/dev/null 2>&1 && echo "  ✓ python3 websocket-client" || { echo "  ✗ python3 websocket-client"; ok=0; }
+[ -n "$novnc" ] && echo "  OK noVNC ($novnc)" || { echo "  FAIL noVNC"; ok=0; }
+python3 -c 'import websocket' >/dev/null 2>&1 && echo "  OK python3 websocket-client" || { echo "  FAIL python3 websocket-client"; ok=0; }
 
 if [ "$ok" = 1 ]; then
     echo
-    echo "✓ 浏览器栈就绪。重启 llmsproxy 后，flow=vnc 的平台即可用 VNC 兜底登录。"
+    echo "OK 浏览器栈就绪。重启 llmsproxy 后，flow=vnc 的平台即可用 VNC 兜底登录。"
 else
     echo
     echo "WARN: 仍有缺失项，VNC 兜底在该机器上不可用。插件的 deps/status 端点会一样报告。" >&2

packaging/upload-release.sh

@@ -20,7 +20,7 @@
 set -uo pipefail
 
 TOKEN="$(tr -d '\n\r' < /tmp/gc_token)"
-REPO="JianFeeeee/ModelRouter"
+REPO="HeNanMU-EEA/ModelRouter"
 TAG="${1:?usage: upload-release.sh <tag> <file>...}"
 shift
 
@@ -43,7 +43,7 @@ try:
 except Exception:
     print("")' 2>/dev/null)"
   if [ -z "$url" ]; then
-    echo "✗ 取得上传地址失败: ${resp:0:140}"
+    echo "FAIL 取得上传地址失败: ${resp:0:140}"
     continue
   fi
 
@@ -63,9 +63,9 @@ print(subprocess.run(args, capture_output=True, text=True).stdout)
 ' "$f" "$url" 2>/dev/null)"
 
   if [ "$code" = "200" ] || [ "$code" = "201" ] || [ "$code" = "204" ]; then
-    echo "✓ HTTP=$code"
+    echo "OK HTTP=$code"
   else
-    echo "✗ HTTP=$code"
+    echo "FAIL HTTP=$code"
   fi
   sleep 1
 done

packaging/verify-dist.sh

@@ -43,7 +43,7 @@ for entry in "${checks[@]}"; do
   if [ "$sz" -lt "$min" ]; then
     fail "$(basename "$match") is only $sz bytes (min $min) — likely a degenerate shell like the 1.3.0 264KB exe"
   fi
-  log "  ✓ $(basename "$match") ($((sz/1024)) KB)"
+  log "  OK $(basename "$match") ($((sz/1024)) KB)"
 done
 
 log "all artifacts healthy"