copy: second-round copy review across console, settings, agent and server messages

- Trim descriptions, empty states, confirm buttons and toasts to facts
- Unify terms per glossary: 待处理/待识别/整理记录/运行记录/凭证/子会话/Agent 上游
- Subscription-login termsNote states facts only (borrowed client identity, ToS/ban risk)
- Shorter, concrete goal templates for built-in Agent checks
- Human-readable nouns instead of table names in instance CRUD errors
- Audit labels for pi_upstream / schedule / automation_grant actions
- Glossary: add 上游、订阅登录、凭证、定时任务、巡检、运行记录、子会话、停止、持续授权

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/settings/pi-oauth.tsx

@@ -102,7 +102,7 @@ export function PiOAuthLogin({
     abortRef.current = ac;
     while (!ac.signal.aborted) {
       if (Date.now() > new Date(s.expiresAt).getTime()) {
-        finish("expired", "超过有效期仍未完成授权。");
+        finish("expired", "授权已超时。");
         return;
       }
       try {
@@ -256,7 +256,7 @@ export function PiOAuthLogin({
       ) : (
         <form onSubmit={submitPasted} noValidate className="grid gap-2 rounded-lg border border-border/60 p-3">
           <p className="text-caption text-muted-foreground">
-            在自己的浏览器打开授权链接。授权后会跳到 localhost 地址,页面打不开是正常的,把地址栏里的完整 URL 粘到下面。
+            在浏览器打开授权链接。授权后会跳到 localhost 地址,页面打不开属正常,把地址栏里的完整 URL 粘贴到下面。
           </p>
           {session.authorizeUrl ? (
             <div className="flex min-w-0 items-center gap-2">