copy: second-round copy review across console, settings, agent and server messages

- Trim descriptions, empty states, confirm buttons and toasts to facts
- Unify terms per glossary: 待处理/待识别/整理记录/运行记录/凭证/子会话/Agent 上游
- Subscription-login termsNote states facts only (borrowed client identity, ToS/ban risk)
- Shorter, concrete goal templates for built-in Agent checks
- Human-readable nouns instead of table names in instance CRUD errors
- Audit labels for pi_upstream / schedule / automation_grant actions
- Glossary: add 上游、订阅登录、凭证、定时任务、巡检、运行记录、子会话、停止、持续授权

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/settings/pi-upstreams.tsx

@@ -51,7 +51,7 @@ export function PiUpstreamsBlock() {
       section="agent"
       anchor="upstream"
       title="上游"
-      description="Agent 调用的模型上游。没指定上游的运行用默认上游;密钥和登录凭据只写入,不回显。"
+      description="没指定上游的运行用默认上游。密钥和登录凭证保存后不回显。"
       plain
       actions={
         <Button size="sm" onClick={() => setWizard(true)}>
@@ -291,7 +291,7 @@ function UpstreamDrawer({
             disabled={pending}
           />
           <FieldControl
-            spec={{ name: "enabled", label: "启用", kind: "switch", hint: "停用后用它的运行直接失败" }}
+            spec={{ name: "enabled", label: "启用", kind: "switch", hint: "停用后,使用它的运行会失败" }}
             value={v.enabled}
             onChange={(x) => setV((s) => ({ ...s, enabled: x === true }))}
             disabled={pending}
@@ -377,7 +377,7 @@ function UpstreamDrawer({
         onOpenChange={setDeleting}
         title={`删除上游「${upstream.name}」?`}
         description={
-          upstream.isDefault ? "它是默认上游,删除后没有默认上游;凭据一并删除,无法恢复。" : "凭据一并删除,无法恢复。"
+          upstream.isDefault ? "它是默认上游,删除后没有默认上游;凭证一并删除,无法恢复。" : "凭证一并删除,无法恢复。"
         }
         confirmLabel="删除上游"
         destructive