feat: SafeLine CE 9.3.9 with pro features

- Remove telemetry: disabled all phone-home (installation notify, false positives, behavior tracking, upgrade tips)
- Version branding: removed 'ce-' prefix, product name changed to '长亭雷池 WAF'
- Detection engine enhancement: strict preset enables all 17 modules with aggressive configs
- Multi-user RBAC: admin/operator/viewer roles with password + TOTP 2FA
- Rate limiting: nginx limit_req per website (RPS, burst, action)
- JS Challenge: browser fingerprint verification page with cookie-based bypass
- Security fixes: removed InsecureSkipVerify, hardcoded credentials, NO_AUTH backdoor

.gitignore

@@ -0,0 +1,17 @@
+.env
+*.env
+*.db
+*.db-*
+node_modules/
+vendor/
+build/
+dist/
+*.exe
+*.log
+logs/
+.idea/
+.vscode/
+*.pem
+*.key
+*.crt
+gitea-token.txt