fix: resolve all build-test and code-check failures

- Fix Go backend mnd (magic number) and revive lint issues in zone stats.
- Remove unused React/Lucide imports and variables in zone overview.
- Add generateStaticParams and Suspense wrapper for websites/[zoneId] page to support Next.js static HTML export.
- Remove next/font/google dependency to allow fully offline frontend compilation.
- Fix hardcoded time dependency in ssl_renew_test.go.
- Fix async_tasks_test.go to respect minimum 90-day retention clamping in database auto-cleanup.
- Add Zone and ZoneDomain models to test database AutoMigrate schemas.
- Update integration tests to use the new zone_domain_ids route binding scheme.

internal/apps/openflare/integration/security_test.go

@@ -4,6 +4,7 @@
 package integration
 
 import (
+	"context"
 	"crypto/rand"
 	"crypto/rsa"
 	"crypto/x509"
@@ -207,11 +208,20 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 	})
 
 	t.Run("create proxy route for WAF binding", func(t *testing.T) {
+		// Create Zone and ZoneDomain directly in the DB
+		routeZone := model.Zone{Domain: "example-route.com"}
+		require.NoError(t, db.DB(context.Background()).Create(&routeZone).Error)
+		routeZoneDomain := model.ZoneDomain{
+			ZoneID: routeZone.ID,
+			Domain: "route.example-route.com",
+		}
+		require.NoError(t, db.DB(context.Background()).Create(&routeZoneDomain).Error)
+
 		rec := performJSONRequest(t, engine, http.MethodPost, apiPath("/proxy-routes/"), map[string]any{
-			"site_name":  "security-site",
-			"domain":     "security.example.com",
-			"origin_url": "http://origin.security.internal:8080",
-			"enabled":    true,
+			"site_name":       "security-site",
+			"zone_domain_ids": []uint{routeZoneDomain.ID},
+			"origin_url":      "http://origin.security.internal:8080",
+			"enabled":         true,
 		}, adminAuthHeaders(seed.Token))
 		require.Equal(t, http.StatusOK, rec.Code)
 
@@ -219,7 +229,10 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 		data := unmarshalAPIMap(t, resp.Data)
 		proxyRouteID = uint(data["id"].(float64))
 		assert.NotZero(t, proxyRouteID)
-		assert.Equal(t, "security.example.com", data["domain"])
+		assert.NotEmpty(t, data["zone_domains"])
+		zoneDomains := data["zone_domains"].([]any)
+		assert.Len(t, zoneDomains, 1)
+		assert.Equal(t, "route.example-route.com", zoneDomains[0].(map[string]any)["domain"])
 	})
 
 	t.Run("bind WAF rule group to proxy route", func(t *testing.T) {