refactor(openflare): migrate console APIs to v1 and centralize routing

Move OpenFlare management endpoints to /api/v1/custom/openflare with
Wavelet response envelopes and Abort* error handling. Keep agent, relay,
and flared protocol routes on /api/* with the legacy compat format.

- Add apiutil helpers and Swagger annotations for console handlers
- Register all OpenFlare routes in internal/router/openflare (not apps)
- Switch frontend services to OpenFlareBaseService and v1 paths
- Remove dead auth/compat code and legacy-base.service.ts
- Update integration tests and changelog

Wavelet/internal/router/v1/openflare/register_agent.go

@@ -0,0 +1,31 @@
+// Copyright 2026 Arctel.net
+// SPDX-License-Identifier: Apache-2.0
+
+package openflare
+
+import (
+	"github.com/Rain-kl/Wavelet/internal/apps/openflare/agent"
+	"github.com/gin-gonic/gin"
+)
+
+func registerAgentRoutes(apiGroup *gin.RouterGroup) {
+	agentRoute := apiGroup.Group("/agent")
+	{
+		discoveryRoute := agentRoute.Group("/")
+		discoveryRoute.Use(agent.AgentRegisterAuth())
+		{
+			discoveryRoute.POST("/nodes/register", agent.RegisterHandler)
+		}
+
+		authorizedRoute := agentRoute.Group("/")
+		authorizedRoute.Use(agent.AgentAuth())
+		{
+			authorizedRoute.GET("/ws", agent.AgentWebSocketHandler)
+			authorizedRoute.POST("/nodes/heartbeat", agent.HeartbeatHandler)
+			authorizedRoute.GET("/config-versions/active", agent.GetActiveConfigHandler)
+			authorizedRoute.GET("/pages/deployments/:deployment_id/package", agent.DownloadPagesPackageHandler)
+			authorizedRoute.POST("/waf/ip-groups/sync", agent.SyncWAFIPGroupsHandler)
+			authorizedRoute.POST("/apply-logs", agent.ReportApplyLogHandler)
+		}
+	}
+}