feat: 新增工具插件、系统日志、workflow配置及前端优化

1. 新增工具插件(edit_file, python_executor, search_file, shell_executor, write_file)
2. 新增系统事件日志模块和API
3. 新增workflow配置文件和详情API
4. 前端增加SSE、错误边界、设置引导等组件
5. 优化认证加密、速率限制、配置加载等工具模块
6. 删除废弃的cluster和health API
7. 补充单元测试和集成测试

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

kilostar/api/__init__.py

@@ -23,8 +23,7 @@ from ray import serve
 
 from .agent import agent_router
 from .auth import auth_router
-from .cluster import cluster_router
-from .health import health_router
+from .system import system_router
 from .platform.frontend import client_router
 from .platform.onebot import onebot_router
 from .provider import provider_router
@@ -53,7 +52,13 @@ def _get_locale(request: Request) -> str | None:
 
 app = FastAPI()
 
-_cors_origins_env = os.environ.get("KILOSTAR_CORS_ORIGINS", "*")
+_cors_origins_env = os.environ.get("KILOSTAR_CORS_ORIGINS", "")
+_is_dev = os.environ.get("KILOSTAR_ENV", "production").lower() in ("dev", "development")
+if not _cors_origins_env and _is_dev:
+    _cors_origins_env = "*"
+elif not _cors_origins_env:
+    _cors_origins_env = "http://localhost:8000"
+
 _cors_origins = [o.strip() for o in _cors_origins_env.split(",") if o.strip()]
 _allow_credentials = "*" not in _cors_origins
 app.add_middleware(
@@ -83,13 +88,12 @@ async def request_id_middleware(request: Request, call_next):
     response.headers["X-Request-Id"] = request_id
     return response
 
-app.include_router(health_router)  # 健康检查
+app.include_router(system_router)  # 健康探针 + 系统信息
 app.include_router(client_router)  # 客户端路径
 app.include_router(onebot_router)  # OneBot v11 路径
 app.include_router(auth_router)  # 用户路径
 app.include_router(provider_router)  # 供应商路径
 app.include_router(resource_router)  # 资源路径
-app.include_router(cluster_router)  # 集群信息路径
 app.include_router(agent_router)  # agent路径
 app.include_router(workflow_router)  # workflow路径
 app.include_router(chat_router)  # chat路径