chore: 初始开源发布

iotlcm-upstream-proxy：渠道缓存与转发网关。

- 内联原私有依赖：yunze-public → internal/pub/（18 文件），
  yunze-pb/pb → internal/pb/（9 文件）；Consul 注册改用官方
  gogf/gf/contrib/registry/consul/v2（API 兼容）
- Go module：yz-svr → git.5iot.com/iotlcm-public/iotlcm-upstream-proxy
- 凭据与内部标识脱敏：MySQL/Redis/Consul 凭据、私网与生产 IP、内网域名
- 移除内部资产：CI 触发器
- Dockerfile 改用公共基础镜像，移除写死的 registry 凭据
- 补 Apache-2.0 LICENSE，重写 README，LF 行尾 + .gitattributes

internal/logic/channelconfig/channel_config_test.go

@@ -0,0 +1,37 @@
+package channelconfig
+
+import (
+	"context"
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-proxy/internal/model/entity"
+	"testing"
+)
+
+func TestChannelVersionDetectsCredentialChanges(t *testing.T) {
+	normal := 0
+	row := &channelConfigRow{IsNormal: &normal, TSimChannels: entity.TSimChannels{
+		ChanKey: "telecom-test", TempKey: "sim_dx_v1", AppKey: "key", AppSecret: "secret",
+		AccessToken: "token", RefreshToken: "refresh",
+	}}
+	config := NewChannelConfig()
+	before := config.getChanVersion(context.Background(), row)
+	for _, field := range []string{"appKey", "appSecret", "accessToken", "refreshToken", "tempKey"} {
+		t.Run(field, func(t *testing.T) {
+			changed := *row
+			switch field {
+			case "appKey":
+				changed.AppKey = "new-key"
+			case "appSecret":
+				changed.AppSecret = "new-secret"
+			case "accessToken":
+				changed.AccessToken = "new-token"
+			case "refreshToken":
+				changed.RefreshToken = "new-refresh"
+			case "tempKey":
+				changed.TempKey = "sim_dx_v3"
+			}
+			if got := config.getChanVersion(context.Background(), &changed); got == before {
+				t.Fatalf("%s change did not invalidate runtime version", field)
+			}
+		})
+	}
+}