copy: second-round copy review across console, settings, agent and server messages

- Trim descriptions, empty states, confirm buttons and toasts to facts
- Unify terms per glossary: 待处理/待识别/整理记录/运行记录/凭证/子会话/Agent 上游
- Subscription-login termsNote states facts only (borrowed client identity, ToS/ban risk)
- Shorter, concrete goal templates for built-in Agent checks
- Human-readable nouns instead of table names in instance CRUD errors
- Audit labels for pi_upstream / schedule / automation_grant actions
- Glossary: add 上游、订阅登录、凭证、定时任务、巡检、运行记录、子会话、停止、持续授权

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/pi/refresh.ts

@@ -24,13 +24,13 @@ const DECISION_KEY = (id: string) => `pi_upstream_expired:${id}`;
 
 /** 与其它模块的 upsertDecision 同一写法(跨模块不 import):同键未关闭时只累加 attempts */
 async function upsertExpiredDecision(ctx: ServerContext, row: PiUpstreamRow, message: string) {
-  const title = `模型上游「${row.name}」登录已失效,需要重新登录`;
+  const title = `Agent 上游「${row.name}」登录已失效,需要重新登录`;
   await ctx.db.transaction().execute(async (trx) => {
     const r = await sql<{ id: string; inserted: boolean }>`
       insert into decision (kind, severity, title, summary, subject_type, subject_id, dedupe_key, evidence, options)
       values ('other', 'warning', ${title}, ${message}, 'pi_upstream', ${row.id}, ${DECISION_KEY(row.id)},
               ${JSON.stringify({ provider: row.provider, upstreamId: row.id, error: message })}::jsonb,
-              ${JSON.stringify([{ key: "relogin", label: "去设置页重新登录", description: "设置 → 模型上游 → 登录" }])}::jsonb)
+              ${JSON.stringify([{ key: "relogin", label: "重新登录", description: "设置 → Agent → 上游" }])}::jsonb)
       on conflict (dedupe_key) where status in ('open', 'investigating', 'awaiting_user')
       do update set attempts = decision.attempts + 1, evidence = excluded.evidence, summary = excluded.summary,
                     updated_at = now()
@@ -102,7 +102,7 @@ export async function refreshPiTokens(ctx: ServerContext, opts: RefreshOptions =
     if (r.ok) report.refreshed += 1;
     else {
       report.failed.push({ upstreamId: row.id, message: r.message });
-      ctx.logger.warn({ upstreamId: row.id, provider: row.provider, message: r.message }, "Pi 上游 token 刷新失败");
+      ctx.logger.warn({ upstreamId: row.id, provider: row.provider, message: r.message }, "Agent 上游 token 刷新失败");
     }
   }
   return report;