chore: 初始开源发布

iotlcm-upstream-chan：运营商上游通道适配服务（统一 /sim/* 协议）。

- 内联原私有依赖：yunze-public → internal/pub/（10 包 18 文件），
  yunze-pb/pb → internal/pb/（9 文件）；Consul 注册改用官方
  gogf/gf/contrib/registry/consul/v2（API 兼容）
- Go module：yz-svr → git.5iot.com/iotlcm-public/iotlcm-upstream-chan
- 修复 mingqian 包测试：实现重构后 `adapter.operations` 字段已移除，
  测试断言按当前实现语义重写（不改产品行为）
- 凭据与内部标识脱敏：MySQL/Redis/Consul 凭据、私网与生产 IP、
  内网域名、真实手机号、注释里的真实 token/transid
- 移除内部资产：CI 触发器、生产通道种子 SQL、真实凭据测试资源文档
- Dockerfile 改用公共基础镜像，移除写死的 registry 凭据
- 补 Apache-2.0 LICENSE，重写 README，LF 行尾 + .gitattributes

internal/token/token_test.go

@@ -0,0 +1,64 @@
+package token
+
+import (
+	"context"
+	"sync"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	"git.5iot.com/iotlcm-public/iotlcm-upstream-chan/internal/model"
+)
+
+func TestTokenManagersShareRefreshFlightByChannel(t *testing.T) {
+	ctx := context.Background()
+	chanKey := "shared-flight-" + time.Now().Format("150405.000000000")
+	var fetchCalls atomic.Int32
+	var persistCalls atomic.Int32
+	start := make(chan struct{})
+	release := make(chan struct{})
+	fetcher := TokenFetcherFunc(func(context.Context, string) (OneLinkToken, error) {
+		fetchCalls.Add(1)
+		close(start)
+		<-release
+		return OneLinkToken{Value: "fresh-token", CreatedAt: time.Now(), ExpiresAt: time.Now().Add(time.Hour)}, nil
+	})
+	persister := TokenPersisterFunc(func(context.Context, *model.UpdateAccessTokenInput) error {
+		persistCalls.Add(1)
+		return nil
+	})
+	first := NewTokenManager(fetcher, WithPersister(persister))
+	second := NewTokenManager(fetcher, WithPersister(persister))
+
+	results := make(chan OneLinkToken, 2)
+	errors := make(chan error, 2)
+	var wg sync.WaitGroup
+	for _, manager := range []TokenManager{first, second} {
+		wg.Add(1)
+		go func(manager TokenManager) {
+			defer wg.Done()
+			token, err := manager.Get(ctx, chanKey)
+			results <- token
+			errors <- err
+		}(manager)
+	}
+	<-start
+	close(release)
+	wg.Wait()
+	close(results)
+	close(errors)
+
+	for err := range errors {
+		if err != nil {
+			t.Fatal(err)
+		}
+	}
+	for token := range results {
+		if token.Value != "fresh-token" {
+			t.Fatalf("token = %+v", token)
+		}
+	}
+	if fetchCalls.Load() != 1 || persistCalls.Load() != 1 {
+		t.Fatalf("fetch calls=%d persist calls=%d, want one each", fetchCalls.Load(), persistCalls.Load())
+	}
+}