[优化] 优化 WAF IP 组同步功能及相关文档更新

openflare_server/web/features/waf/components/rule-entry-modal.tsx

@@ -188,7 +188,7 @@ export function RuleEntryModal({
                   选择 IP 组
                 </h3>
                 <p className="mt-1 text-xs leading-5 text-[var(--foreground-secondary)]">
-                  被引用的 IP 组会在发布配置时展开到 WAF 运行时名单。
+                  发布版本只保存引用 ID，IP 组成员由 Agent 按 checksum 差异同步。
                 </p>
               </div>
               <span className="rounded-full border border-[var(--border-default)] px-2.5 py-1 text-xs font-medium text-[var(--foreground-secondary)]">

openflare_server/web/tests/unit/waf-ip-groups-page.test.tsx

@@ -253,8 +253,8 @@ describe('WAF IP groups', () => {
     await userEvent.click(screen.getByRole('button', { name: /测试规则/ }));
 
     expect(await screen.findByText('命中 2 个 IP。')).toBeInTheDocument();
-    expect(screen.getByText('203.0.113.10')).toBeInTheDocument();
-    expect(screen.getByText('203.0.113.11')).toBeInTheDocument();
+    expect(screen.getByText(/203\.0\.113\.10/)).toBeInTheDocument();
+    expect(screen.getByText(/203\.0\.113\.11/)).toBeInTheDocument();
     expect(testMock).toHaveBeenCalledWith({
       auto_config: expect.objectContaining({
         lookback_minutes: 60,