refactor(pages): 精简部署源模型并重构详情页交互

将 Remote 网络策略收敛为 allow_insecure，去掉脱敏与无用字段；
Pages 详情拆为部署/设置 Tab，统一卡片样式与来源信息展示。

internal/apps/openflare/pages/github_source_test.go

@@ -150,9 +150,8 @@ func TestGitHubSourceValidationNormalizationAndProviderSwitch(t *testing.T) {
 	secret := "provider-switch-secret"
 	if _, err := UpdateSource(ctx, project.ID, SourceUpdateInput{
 		SourceType:          PagesSourceTypeRemoteURL,
-		RemoteURLSet:        true,
-		RemoteURL:           "https://artifacts.example.com/site.zip?token=" + secret,
-		RemoteNetworkPolicy: RemoteNetworkPolicyPublic,
+		RemoteURL:     "https://artifacts.example.com/site.zip?token=" + secret,
+		AllowInsecure: false,
 	}); err != nil {
 		t.Fatalf("UpdateSource(GitHub to Remote) error = %v, want nil", err)
 	}
@@ -165,8 +164,8 @@ func TestGitHubSourceValidationNormalizationAndProviderSwitch(t *testing.T) {
 		t.Fatalf("UpdateSourceAs(Remote to GitHub) error = %v, want nil", err)
 	}
 	github, _ := mustLoadPagesSource(t, ctx, project.ID)
-	if github.RemoteURL != "" || github.RemoteNetworkPolicy != "" {
-		t.Errorf("GitHub switched source retained Remote fields: URL=%q policy=%q", github.RemoteURL, github.RemoteNetworkPolicy)
+	if github.RemoteURL != "" || github.AllowInsecure {
+		t.Errorf("GitHub switched source retained Remote fields: URL=%q allow_insecure=%v", github.RemoteURL, github.AllowInsecure)
 	}
 }