refactor(pages): 精简部署源模型并重构详情页交互

将 Remote 网络策略收敛为 allow_insecure，去掉脱敏与无用字段；
Pages 详情拆为部署/设置 Tab，统一卡片样式与来源信息展示。

internal/db/migrator/goose/postgres/202607190002_add_pages_source_runtime.sql

@@ -19,7 +19,7 @@ CREATE TABLE IF NOT EXISTS of_pages_project_sources (
     project_id BIGINT NOT NULL,
     source_type VARCHAR(32) NOT NULL DEFAULT '',
     remote_url TEXT NOT NULL DEFAULT '',
-    remote_network_policy VARCHAR(32) NOT NULL DEFAULT '',
+    allow_insecure BOOLEAN NOT NULL DEFAULT FALSE,
     github_repository VARCHAR(255) NOT NULL DEFAULT '',
     release_selector VARCHAR(16) NOT NULL DEFAULT '',
     release_tag VARCHAR(255) NOT NULL DEFAULT '',

internal/db/migrator/goose/sqlite/202607190002_add_pages_source_runtime.sql

@@ -24,7 +24,7 @@ CREATE TABLE IF NOT EXISTS of_pages_project_sources (
     project_id INTEGER NOT NULL,
     source_type TEXT NOT NULL DEFAULT '',
     remote_url TEXT NOT NULL DEFAULT '',
-    remote_network_policy TEXT NOT NULL DEFAULT '',
+    allow_insecure INTEGER NOT NULL DEFAULT 0,
     github_repository TEXT NOT NULL DEFAULT '',
     release_selector TEXT NOT NULL DEFAULT '',
     release_tag TEXT NOT NULL DEFAULT '',

internal/db/migrator/pages_source_migration_test.go

@@ -175,7 +175,7 @@ func createMigrationSourceRuntime(t *testing.T, gormDB *gorm.DB) uint {
 		ProjectID:            pagesMigrationProjectID,
 		SourceType:           "remote_url",
 		RemoteURL:            "https://example.com/site.zip?token=secret",
-		RemoteNetworkPolicy:  "public",
+		AllowInsecure:        false,
 		CheckIntervalMinutes: 0,
 		ConfigVersion:        1,
 		SourceIdentity:       strings.Repeat("b", 64),