feat(waf): 新增 UA 检查节点 ua_check

支持要求携带 UA、浏览器/OS 白名单 and-or 匹配，以及优先屏蔽爬虫与非正常 UA。

frontend/app/(main)/waf/rules/editor/components/node-properties.test.tsx

@@ -5,6 +5,35 @@ import type { WAFIPGroup, WAFRuleNode } from '@/lib/services/openflare';
 
 import { NodeProperties } from './node-properties';
 
+it('toggles UA check switches and match mode', () => {
+  const node: WAFRuleNode = {
+    id: 'ua',
+    type: 'ua_check',
+    position: { x: 0, y: 0 },
+    config: {
+      require_ua: false,
+      browsers: [],
+      operating_systems: [],
+      match_mode: 'or',
+      block_common_bots: false,
+      block_abnormal_ua: false,
+    },
+  };
+  const onChange = vi.fn();
+  render(<NodeProperties node={node} ipGroups={[]} onChange={onChange} />);
+  fireEvent.click(screen.getByLabelText('开启 UA 检查'));
+  expect(onChange).toHaveBeenCalledWith(
+    expect.objectContaining({
+      config: expect.objectContaining({ require_ua: true }),
+    }),
+  );
+  expect(screen.getByLabelText('屏蔽常见爬虫 UA')).toBeInTheDocument();
+  expect(screen.getByLabelText('屏蔽非正常 UA')).toBeInTheDocument();
+  expect(
+    screen.getByText('命中返回 false，优先级高于匹配'),
+  ).toBeInTheDocument();
+});
+
 it('edits display name for configurable nodes', () => {
   const node: WAFRuleNode = {
     id: 'match',