refactor(zone): remove legacy route domain storage

第二阶段清理：删除 of_managed_domains 与 of_proxy_routes 冗余域名/证书列，
移除 ManagedDomain 模型与 API、路由侧 legacy 字段维护，以及前端 WebsiteService。
ImportLegacy 在旧列/旧表缺失时跳过对应源，保持幂等。

frontend/app/(main)/websites/components/certificate-editor-dialog.tsx

@@ -62,8 +62,7 @@ export function CertificateEditorDialog({
     onSuccess: async (certificate) => {
       await Promise.all([
         queryClient.invalidateQueries({queryKey: certificatesQueryKey}),
-        queryClient.invalidateQueries({queryKey: ['openflare', 'managed-domains']}),
-      ]);
+              ]);
       onSaved?.(certificate);
       handleClose();
     },

frontend/app/(main)/websites/components/certificate-import-dialog.tsx

@@ -58,8 +58,7 @@ export function CertificateImportDialog({
   const invalidateQueries = async () => {
     await Promise.all([
       queryClient.invalidateQueries({queryKey: certificatesQueryKey}),
-      queryClient.invalidateQueries({queryKey: ['openflare', 'managed-domains']}),
-    ]);
+          ]);
   };
 
   const resetFileForm = () => {

frontend/lib/services/index.ts

@@ -41,7 +41,6 @@ import {
   TlsCertificateService,
   UptimeKumaService,
   WafService,
-  WebsiteService,
   ZoneDomainService,
   ZoneService,
 } from './openflare';
@@ -68,7 +67,6 @@ const services = {
   openflareApplyLog: ApplyLogService,
   openflareDashboard: DashboardService,
   openflareWaf: WafService,
-  openflareWebsite: WebsiteService,
   openflareZone: ZoneService,
   openflareZoneDomain: ZoneDomainService,
   openflareTls: TlsCertificateService,
@@ -191,7 +189,6 @@ export {
   ApplyLogService,
   DashboardService,
   WafService,
-  WebsiteService,
   TlsCertificateService,
   DnsAccountService,
   PagesService,
@@ -216,7 +213,6 @@ export type {
   WAFIPGroup,
   WAFRuleGroup,
   WAFSiteRuleGroups,
-  ManagedDomainItem,
   TlsCertificateItem,
   DnsAccountItem,
   PagesProject,

frontend/lib/services/openflare/index.ts

@@ -6,7 +6,6 @@ export { ConfigVersionService } from './config-version.service';
 export { ApplyLogService } from './apply-log.service';
 export { DashboardService } from './dashboard.service';
 export { WafService } from './waf.service';
-export { WebsiteService } from './website.service';
 export { ZoneDomainService, ZoneService, zoneQueryKey } from './zone.service';
 export { TlsCertificateService } from './tls-certificate.service';
 export { DnsAccountService } from './dns-account.service';
@@ -104,9 +103,6 @@ export type {
   AcmeAccountItem,
   DnsAccountItem,
   DnsAccountMutationPayload,
-  ManagedDomainItem,
-  ManagedDomainMatchResult,
-  ManagedDomainMutationPayload,
   ZoneDomainItem,
   ZoneDomainMutationPayload,
   ZoneItem,
@@ -134,7 +130,7 @@ import {PagesService} from './pages.service';
 import {ProxyRouteService} from './proxy-route.service';
 import {TlsCertificateService} from './tls-certificate.service';
 import {WafService} from './waf.service';
-import {WebsiteService} from './website.service';
+import {ZoneDomainService, ZoneService} from './zone.service';
 
 export const openflareServices = {
   node: NodeService,
@@ -143,7 +139,8 @@ export const openflareServices = {
   applyLog: ApplyLogService,
   dashboard: DashboardService,
   waf: WafService,
-  website: WebsiteService,
+  zone: ZoneService,
+  zoneDomain: ZoneDomainService,
   tlsCertificate: TlsCertificateService,
   dnsAccount: DnsAccountService,
   pages: PagesService,

frontend/lib/services/openflare/types.ts

@@ -998,37 +998,9 @@ export interface ZoneOverview {
   domains: ZoneDomainItem[];
 }
 
-export interface ManagedDomainItem {
-  id: number;
-  domain: string;
-  cert_id: number | null;
-  enabled: boolean;
-  remark: string;
-  created_at: string;
-  updated_at: string;
-}
 
-export interface ManagedDomainMutationPayload {
-  domain: string;
-  cert_id: number | null;
-  enabled: boolean;
-  remark: string;
-}
 
-export interface ManagedDomainMatchCandidate {
-  managed_domain_id: number;
-  domain: string;
-  match_type: 'exact' | 'wildcard' | string;
-  certificate_id: number;
-  certificate_name: string;
-}
 
-export interface ManagedDomainMatchResult {
-  domain: string;
-  matched: boolean;
-  candidate?: ManagedDomainMatchCandidate;
-  candidates: ManagedDomainMatchCandidate[];
-}
 
 export interface TlsCertificateItem {
   id: number;

frontend/lib/services/openflare/website.service.ts

@@ -1,35 +0,0 @@
-import {OpenFlareBaseService} from './base.service';
-import type {
-  ManagedDomainItem,
-  ManagedDomainMatchResult,
-  ManagedDomainMutationPayload,
-} from './types';
-
-export class WebsiteService extends OpenFlareBaseService {
-  protected static override readonly basePath: string = '/api/v1/d/managed-domains';
-
-  static async list(): Promise<ManagedDomainItem[]> {
-    return this.get<ManagedDomainItem[]>('/');
-  }
-
-  static async create(
-    payload: ManagedDomainMutationPayload,
-  ): Promise<ManagedDomainItem> {
-    return this.post<ManagedDomainItem>('/', payload);
-  }
-
-  static async update(
-    id: number,
-    payload: ManagedDomainMutationPayload,
-  ): Promise<ManagedDomainItem> {
-    return this.post<ManagedDomainItem>(`/${id}/update`, payload);
-  }
-
-  static async deleteById(id: number): Promise<void> {
-    return this.post<void>(`/${id}/delete`);
-  }
-
-  static async match(domain: string): Promise<ManagedDomainMatchResult> {
-    return this.get<ManagedDomainMatchResult>('/match', {domain});
-  }
-}