chore: 初始开源发布

iotlcm-upstream-proxy：渠道缓存与转发网关。

- 内联原私有依赖：yunze-public → internal/pub/（18 文件），
  yunze-pb/pb → internal/pb/（9 文件）；Consul 注册改用官方
  gogf/gf/contrib/registry/consul/v2（API 兼容）
- Go module：yz-svr → git.5iot.com/iotlcm-public/iotlcm-upstream-proxy
- 凭据与内部标识脱敏：MySQL/Redis/Consul 凭据、私网与生产 IP、内网域名
- 移除内部资产：CI 触发器
- Dockerfile 改用公共基础镜像，移除写死的 registry 凭据
- 补 Apache-2.0 LICENSE，重写 README，LF 行尾 + .gitattributes

internal/cmd/http_test.go

@@ -0,0 +1,38 @@
+package cmd
+
+import (
+	"strings"
+	"testing"
+
+	"github.com/gogf/gf/v2/net/ghttp"
+)
+
+func TestBindHTTPRoutesRegistersChannelControlRoutes(t *testing.T) {
+	server := ghttp.GetServer("proxy-channel-refresh-route-test")
+	server.SetAddr("127.0.0.1:0")
+	bindHTTPRoutes(server)
+	if err := server.Start(); err != nil {
+		t.Fatalf("start HTTP server: %v", err)
+	}
+	t.Cleanup(func() {
+		if err := server.Shutdown(); err != nil {
+			t.Errorf("shutdown HTTP server: %v", err)
+		}
+	})
+
+	want := map[string]bool{
+		"/internal/channel/refresh":        false,
+		"/internal/channel/remove":         false,
+		"/internal/app-diagnosis/sim/*any": false,
+	}
+	for _, route := range server.GetRoutes() {
+		if _, ok := want[route.Route]; ok && strings.EqualFold(route.Method, "POST") {
+			want[route.Route] = true
+		}
+	}
+	for route, found := range want {
+		if !found {
+			t.Fatalf("POST %s route was not registered: %+v", route, server.GetRoutes())
+		}
+	}
+}