copy: second-round copy review across console, settings, agent and server messages

- Trim descriptions, empty states, confirm buttons and toasts to facts
- Unify terms per glossary: 待处理/待识别/整理记录/运行记录/凭证/子会话/Agent 上游
- Subscription-login termsNote states facts only (borrowed client identity, ToS/ban risk)
- Shorter, concrete goal templates for built-in Agent checks
- Human-readable nouns instead of table names in instance CRUD errors
- Audit labels for pi_upstream / schedule / automation_grant actions
- Glossary: add 上游、订阅登录、凭证、定时任务、巡检、运行记录、子会话、停止、持续授权

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/settings/pi-shared.tsx

@@ -7,7 +7,7 @@ import { Input } from "~/components/ui/input.tsx";
 export const GROUP_LABEL: Record<PiProviderGroup, string> = {
   api_key: "API Key",
   subscription: "订阅登录",
-  cloud: "云凭据",
+  cloud: "云凭证",
   custom: "兼容端点",
   test: "测试",
 };
@@ -16,7 +16,7 @@ export const GROUP_ORDER: PiProviderGroup[] = ["api_key", "subscription", "cloud
 export const AUTH_LABEL: Record<PiAuthKind, string> = {
   api_key: "API Key",
   oauth: "订阅登录",
-  none: "不需要凭据",
+  none: "不需要凭证",
 };
 
 export const THINKING_LABEL: Record<PiThinkingLevel, string> = {