chore: 初始开源发布

iotlcm-upstream-chan：运营商上游通道适配服务（统一 /sim/* 协议）。

- 内联原私有依赖：yunze-public → internal/pub/（10 包 18 文件），
  yunze-pb/pb → internal/pb/（9 文件）；Consul 注册改用官方
  gogf/gf/contrib/registry/consul/v2（API 兼容）
- Go module：yz-svr → git.5iot.com/iotlcm-public/iotlcm-upstream-chan
- 修复 mingqian 包测试：实现重构后 `adapter.operations` 字段已移除，
  测试断言按当前实现语义重写（不改产品行为）
- 凭据与内部标识脱敏：MySQL/Redis/Consul 凭据、私网与生产 IP、
  内网域名、真实手机号、注释里的真实 token/transid
- 移除内部资产：CI 触发器、生产通道种子 SQL、真实凭据测试资源文档
- Dockerfile 改用公共基础镜像，移除写死的 registry 凭据
- 补 Apache-2.0 LICENSE，重写 README，LF 行尾 + .gitattributes

internal/logic/upstreamimpl/apika_token_provider_test.go

@@ -0,0 +1,52 @@
+package upstreamimpl
+
+import (
+	"context"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+)
+
+func TestApikaSignature(t *testing.T) {
+	got := apikaSignature("00009ac515b442d6812f892d6e4c9f6a", "7d9264596bea4c5e9f4bcde7a314eb9c")
+	want := "MTY0MzE2QjgzRjg3MDFEQzlCNjRBNDA0QzMyRjM4QURGRDhCN0Y5ODY5Qjc0QjNFOEI3NkVEMUJCQ0IwMEU3OQ=="
+	if got != want {
+		t.Fatalf("signature = %q, want %q", got, want)
+	}
+}
+
+func TestApikaTokenProviderFetch(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.Method != http.MethodPost || r.URL.Path != apikaTokenPath {
+			t.Fatalf("request = %s %s", r.Method, r.URL.Path)
+		}
+		if r.Header.Get("appKey") != "key" || r.Header.Get("appSecret") != "secret" || r.Header.Get("signature") != apikaSignature("key", "secret") {
+			t.Fatalf("headers = %#v", r.Header)
+		}
+		var input struct {
+			AppID     string `json:"appid"`
+			AppKey    string `json:"appKey"`
+			AppSecret string `json:"appSecret"`
+			Signature string `json:"signature"`
+		}
+		if err := json.NewDecoder(r.Body).Decode(&input); err != nil {
+			t.Fatal(err)
+		}
+		if input.AppID != "appid" || input.AppKey != "key" || input.AppSecret != "secret" || input.Signature != apikaSignature("key", "secret") {
+			t.Fatalf("payload = %#v", input)
+		}
+		_, _ = w.Write([]byte(`{"code":200,"msg":"success","data":{"shareToken":"token-1","transid":"tx-1"}}`))
+	}))
+	defer server.Close()
+
+	provider := NewApikaTokenProvider(ApikaTokenConfig{BaseURL: server.URL, AppKey: "key", AppSecret: "secret", AppID: "appid", Timeout: time.Second})
+	token, err := provider.Fetch(context.Background())
+	if err != nil {
+		t.Fatalf("fetch token: %v", err)
+	}
+	if token.Value != "token-1" || !token.ExpiresAt.After(token.CreatedAt) {
+		t.Fatalf("token = %#v", token)
+	}
+}