refactor(openflare): migrate console APIs to v1 and centralize routing

Move OpenFlare management endpoints to /api/v1/custom/openflare with
Wavelet response envelopes and Abort* error handling. Keep agent, relay,
and flared protocol routes on /api/* with the legacy compat format.

- Add apiutil helpers and Swagger annotations for console handlers
- Register all OpenFlare routes in internal/router/openflare (not apps)
- Switch frontend services to OpenFlareBaseService and v1 paths
- Remove dead auth/compat code and legacy-base.service.ts
- Update integration tests and changelog

Wavelet/internal/router/v1/openflare/register_relay_flared.go

@@ -0,0 +1,30 @@
+// Copyright 2026 Arctel.net
+// SPDX-License-Identifier: Apache-2.0
+
+package openflare
+
+import (
+	"github.com/Rain-kl/Wavelet/internal/apps/openflare/flared"
+	"github.com/Rain-kl/Wavelet/internal/apps/openflare/relay"
+	"github.com/gin-gonic/gin"
+)
+
+func registerRelayRoutes(apiGroup *gin.RouterGroup) {
+	relayRoute := apiGroup.Group("/relay")
+	relayRoute.Use(relay.RelayAuth())
+	{
+		relayRoute.POST("/heartbeat", relay.PostHeartbeat)
+		relayRoute.GET("/ws", relay.GetWebSocket)
+	}
+}
+
+func registerFlaredRoutes(apiGroup *gin.RouterGroup) {
+	flaredRoute := apiGroup.Group("/flared")
+	flaredRoute.Use(flared.TunnelAuth())
+	{
+		flaredRoute.POST("/heartbeat", flared.PostHeartbeat)
+		flaredRoute.GET("/config/active", flared.GetActiveConfig)
+		flaredRoute.POST("/apply-log", flared.PostApplyLog)
+		flaredRoute.GET("/ws", flared.GetWebSocket)
+	}
+}