copy: second-round copy review across console, settings, agent and server messages

- Trim descriptions, empty states, confirm buttons and toasts to facts
- Unify terms per glossary: 待处理/待识别/整理记录/运行记录/凭证/子会话/Agent 上游
- Subscription-login termsNote states facts only (borrowed client identity, ToS/ban risk)
- Shorter, concrete goal templates for built-in Agent checks
- Human-readable nouns instead of table names in instance CRUD errors
- Audit labels for pi_upstream / schedule / automation_grant actions
- Glossary: add 上游、订阅登录、凭证、定时任务、巡检、运行记录、子会话、停止、持续授权

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/settings/api-keys.tsx

@@ -105,7 +105,7 @@ export function ApiKeysSection() {
       section="api-keys"
       anchor="keys"
       title="API Key"
-      description="签发给外部程序(媒体服务器插件、脚本)的 Key,按权限范围授权。控制台走登录会话,不用 Key;浏览器本机 Token 在「账户与安全」。"
+      description="签发给外部程序(媒体服务器插件、脚本)的 Key,按权限范围授权。本机 Token 在「账户与安全」。"
       plain
       actions={
         <Button size="sm" onClick={() => setOpen(true)}>
@@ -227,7 +227,7 @@ export function ApiKeysSection() {
         onOpenChange={(o) => !o && setRevoking(null)}
         title={`撤销「${revoking?.name ?? ""}」？`}
         description="使用这个 Key 的程序立即失去访问权限,无法恢复。"
-        confirmLabel="撤销"
+        confirmLabel="撤销 Key"
         destructive
         onConfirm={async () => {
           if (!revoking) return;