feat(proxy): 实现代理节点批量升级回滚、隧道重定向跟随及远程配置管理

核心功能：
- 新增代理节点批量升级回滚工作流，支持分批升级、健康探针、跳过/重试/取消等操作
- proxy 隧道流处理器支持 HTTP 重定向跟随（最多 10 跳），区分 307/308 可重播与不可重播请求体
- proxy 协议新增 follow_redirects / http1_only 字段，网关侧同步支持
- 新增代理节点远端配置变更接口（名称、允许端口、调度状态、升级目标等）
- 新增代理节点注册/反注册/心跳的 Admin API，及节点过期清理维护任务
- gateway 隧道 owner-relay 支持流式代理大请求体，新增 5 MiB 默认限制
- 新增 ProxyNodeRegistrationMutation / ProxyNodeRemoteConfigMutation 数据类型
- proxy 配置新增重定向重播预算、心跳间隔等参数，TUI 安装向导同步更新
- 前端 ProxyNodes 页面新增批量升级操作面板及滚动进度展示

apps/aether-gateway/src/control/route/admin/operations_families.rs

@@ -178,6 +178,69 @@ pub(super) fn classify_admin_operations_family_route(
             "admin:proxy_nodes",
             false,
         ))
+    } else if method == http::Method::POST
+        && matches!(
+            normalized_path,
+            "/api/admin/proxy-nodes/upgrade/cancel" | "/api/admin/proxy-nodes/upgrade/cancel/"
+        )
+    {
+        Some(classified(
+            "admin_proxy",
+            "proxy_nodes_manage",
+            "cancel_upgrade_rollout",
+            "admin:proxy_nodes",
+            false,
+        ))
+    } else if method == http::Method::POST
+        && matches!(
+            normalized_path,
+            "/api/admin/proxy-nodes/upgrade/clear-conflicts"
+                | "/api/admin/proxy-nodes/upgrade/clear-conflicts/"
+        )
+    {
+        Some(classified(
+            "admin_proxy",
+            "proxy_nodes_manage",
+            "clear_upgrade_rollout_conflicts",
+            "admin:proxy_nodes",
+            false,
+        ))
+    } else if method == http::Method::POST
+        && matches!(
+            normalized_path,
+            "/api/admin/proxy-nodes/upgrade/restore-skipped"
+                | "/api/admin/proxy-nodes/upgrade/restore-skipped/"
+        )
+    {
+        Some(classified(
+            "admin_proxy",
+            "proxy_nodes_manage",
+            "restore_skipped_upgrade_rollout_nodes",
+            "admin:proxy_nodes",
+            false,
+        ))
+    } else if method == http::Method::POST
+        && normalized_path.starts_with("/api/admin/proxy-nodes/")
+        && normalized_path.ends_with("/upgrade/skip")
+    {
+        Some(classified(
+            "admin_proxy",
+            "proxy_nodes_manage",
+            "skip_upgrade_rollout_node",
+            "admin:proxy_nodes",
+            false,
+        ))
+    } else if method == http::Method::POST
+        && normalized_path.starts_with("/api/admin/proxy-nodes/")
+        && normalized_path.ends_with("/upgrade/retry")
+    {
+        Some(classified(
+            "admin_proxy",
+            "proxy_nodes_manage",
+            "retry_upgrade_rollout_node",
+            "admin:proxy_nodes",
+            false,
+        ))
     } else if method == http::Method::POST
         && matches!(
             normalized_path,