copy: second-round copy review across console, settings, agent and server messages

- Trim descriptions, empty states, confirm buttons and toasts to facts
- Unify terms per glossary: 待处理/待识别/整理记录/运行记录/凭证/子会话/Agent 上游
- Subscription-login termsNote states facts only (borrowed client identity, ToS/ban risk)
- Shorter, concrete goal templates for built-in Agent checks
- Human-readable nouns instead of table names in instance CRUD errors
- Audit labels for pi_upstream / schedule / automation_grant actions
- Glossary: add 上游、订阅登录、凭证、定时任务、巡检、运行记录、子会话、停止、持续授权

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/settings/pi-wizard.tsx

@@ -22,7 +22,7 @@ import { API_OPTIONS, AUTH_LABEL, GROUP_LABEL, GROUP_ORDER, ModelInput, THINKING
 import { PiTestPanel } from "./pi-test.tsx";
 import { FieldControl } from "./resource-section.tsx";
 
-// 新建 Agent 上游:① 选 provider → ② 填凭据与模型并创建 → ③ 登录 / 测试,可设为默认
+// 新建 Agent 上游:① 选 provider → ② 填凭证与模型并创建 → ③ 登录 / 测试,可设为默认
 
 type Step = "provider" | "config" | "verify";
 
@@ -51,7 +51,7 @@ export function PiUpstreamWizard({ open, onClose }: { open: boolean; onClose: ()
     step === "provider"
       ? "第 1 步,共 3 步:选 provider"
       : step === "config"
-        ? "第 2 步,共 3 步:凭据与模型"
+        ? "第 2 步,共 3 步:凭证与模型"
         : created?.authKind === "oauth"
           ? "第 3 步,共 3 步:登录并测试。上游已创建。"
           : "第 3 步,共 3 步:测试。上游已创建。";
@@ -246,7 +246,7 @@ function ConfigStep({
       ) : null}
       {authKind === "none" && provider.group === "cloud" ? (
         <p className="mb-3 text-caption text-muted-foreground sm:col-span-2">
-          不存密钥,运行时读服务端进程的环境凭据(AWS 凭据链 / Google ADC)。
+          不存密钥,运行时读服务端进程的环境凭证(AWS 凭证链 / Google ADC)。
         </p>
       ) : null}
       {showBaseUrl ? (