feat: M2 HTTP/HTTPS 完善

- store: Local 增加 customDomains/subdomain/locations/hostHeaderRewrite/httpHeaders/basicAuth；Remote 增加 vhostHttpPort；migrate() 补列；CRUD 读写（JSOm 编解码）

- render: http/https proxy 输出 customDomains/subdomain/locations/hostHeaderRewrite/httpHeaders/basicAuth

- main: renderRemote 透传 M2 字段（customDomains 逗号拆分 splitCSV）

- web: LocalNode 折叠 HTTP 路由高级区；RemoteNode vhostHTTPPort；StatusView 显示 HTTP 访问端口

- 测试: TestRenderHTTPAdvanced / TestRenderHTTPSUsesCustomDomains；端到端 PUT canvas→config 验证通过

internal/render/render.go

@@ -32,6 +32,13 @@ type Proxy struct {
 	PoolCount      int
 	Metadatas      map[string]string
 	Annotations    map[string]string
+
+	// M2 HTTP/HTTPS routing (http/https only).
+	Locations          []string          // path routing
+	HostHeaderRewrite  string            // rewrite Host header
+	HTTPHeaders        map[string]string // additional request headers
+	BasicAuthUser      string
+	BasicAuthPassword  string
 }
 
 // frpcAuth mirrors frpc's auth section.
@@ -53,6 +60,12 @@ type frpcTLS struct {
 	ServerName string `json:"serverName,omitempty"`
 }
 
+// frpcBasicAuth mirrors frpc's HTTP basicAuth section.
+type frpcBasicAuth struct {
+	User     string `json:"user,omitempty"`
+	Password string `json:"password,omitempty"`
+}
+
 // frpcProxy is the serialized proxy object. Different types use different
 // fields; empty ones are omitted so the JSON is accepted by frpc.
 type frpcProxy struct {
@@ -71,6 +84,12 @@ type frpcProxy struct {
 	PoolCount      int               `json:"poolCount,omitempty"`
 	Metadatas      map[string]string `json:"metadatas,omitempty"`
 	Annotations    map[string]string `json:"annotations,omitempty"`
+
+	// M2 HTTP/HTTPS routing.
+	Locations         []string          `json:"locations,omitempty"`
+	HostHeaderRewrite string            `json:"hostHeaderRewrite,omitempty"`
+	HTTPHeaders       map[string]string `json:"httpHeaders,omitempty"`
+	HTTPBasicAuth     *frpcBasicAuth    `json:"basicAuth,omitempty"`
 }
 
 // Config is a complete frpc configuration document.
@@ -109,17 +128,23 @@ func Render(remote store.Remote, proxies []Proxy) ([]byte, error) {
 	nameCounts := make(map[string]int)
 	for _, p := range proxies {
 		frpcP := frpcProxy{
-			Name:           p.Name,
-			Type:           p.Type,
-			LocalIP:        p.LocalIP,
-			LocalPort:      p.LocalPort,
-			SubDomain:      p.SubDomain,
-			UseEncryption:  p.UseEncryption,
-			UseCompression: p.UseCompression,
-			BandwidthLimit: p.BandwidthLimit,
-			PoolCount:      p.PoolCount,
-			Metadatas:      p.Metadatas,
-			Annotations:    p.Annotations,
+			Name:              p.Name,
+			Type:              p.Type,
+			LocalIP:           p.LocalIP,
+			LocalPort:         p.LocalPort,
+			SubDomain:         p.SubDomain,
+			UseEncryption:     p.UseEncryption,
+			UseCompression:    p.UseCompression,
+			BandwidthLimit:    p.BandwidthLimit,
+			PoolCount:         p.PoolCount,
+			Metadatas:         p.Metadatas,
+			Annotations:       p.Annotations,
+			Locations:         p.Locations,
+			HostHeaderRewrite: p.HostHeaderRewrite,
+			HTTPHeaders:       p.HTTPHeaders,
+		}
+		if p.BasicAuthUser != "" || p.BasicAuthPassword != "" {
+			frpcP.HTTPBasicAuth = &frpcBasicAuth{User: p.BasicAuthUser, Password: p.BasicAuthPassword}
 		}
 		// http/https proxies use customDomains instead of remotePort. The
 		// default domain is <name>.local; frps matches it by Host header.