refactor(repository): 收敛 model/repository 分层为唯一持久化入口

将 OpenFlare 与平台业务的数据访问从 model 与 apps 直连迁入 repository，
model 仅保留实体与无 IO 规则；补充 code-check 架构守卫与开发规范。

internal/apps/openflare/uptimekuma/sync.go

@@ -100,7 +100,7 @@ func SyncToUptimeKuma(ctx context.Context) error {
 		"scope", config.MonitorScope,
 	)
 
-	allRoutes, err := model.ListProxyRoutes(ctx)
+	allRoutes, err := repository.ListProxyRoutes(ctx)
 	if err != nil {
 		return fmt.Errorf("failed to list local proxy routes: %w", err)
 	}
@@ -227,7 +227,7 @@ func routeMonitorURL(ctx context.Context, route *model.ProxyRoute) (string, erro
 	if route == nil {
 		return "", fmt.Errorf("proxy route is nil")
 	}
-	domains, err := model.ListZoneDomainsByRouteID(ctx, route.ID)
+	domains, err := repository.ListZoneDomainsByRouteID(ctx, route.ID)
 	if err != nil {
 		return "", err
 	}