🐛 fix(security): 修复 macOS 无法打开应用及三平台依赖系统钥匙串的问题

- 密文存储：新增 dailysecret 本地存储引擎，连接/代理/AI 密钥不再依赖系统钥匙串
- 启动迁移：自动将已有钥匙串密文迁移到本地 JSON，用户无感知
- WebKit 迁移：从旧版 Wails WebKit LocalStorage 中恢复连接与代理数据
- DMG 修复：移除 --sandbox-safe 避免扩展属性污染签名，新增 xattr 清理与签名校验
- 安全适配：钥匙串不可用时标记完成而非回滚，消除无钥匙串环境下的阻塞
- 出口脱敏：所有连接/代理 API 返回前统一 sanitize 防止密文泄漏

internal/app/connection_package_transfer.go

@@ -21,7 +21,7 @@ func newConnectionPackageItem(view connection.SavedConnectionView, bundle connec
 		IncludeRedisDatabases: cloneIntSlice(view.IncludeRedisDatabases),
 		IconType:              view.IconType,
 		IconColor:             view.IconColor,
-		Config:                view.Config,
+		Config:                stripConnectionSecretFields(view.Config),
 		Secrets:               bundle,
 	}
 }
@@ -229,7 +229,11 @@ func (a *App) ImportConnectionsPayload(raw string, password string) ([]connectio
 		if err != nil {
 			return nil, err
 		}
-		return a.importConnectionPackagePayload(payload)
+		views, err := a.importConnectionPackagePayload(payload)
+		if err != nil {
+			return nil, err
+		}
+		return sanitizeSavedConnectionViews(views), nil
 	}
 
 	if isConnectionPackageV2Protected(trimmed) {
@@ -241,7 +245,11 @@ func (a *App) ImportConnectionsPayload(raw string, password string) ([]connectio
 		if err != nil {
 			return nil, err
 		}
-		return a.importConnectionPackagePayload(payload)
+		views, err := a.importConnectionPackagePayload(payload)
+		if err != nil {
+			return nil, err
+		}
+		return sanitizeSavedConnectionViews(views), nil
 	}
 
 	if isConnectionPackageEnvelope(trimmed) {
@@ -253,7 +261,11 @@ func (a *App) ImportConnectionsPayload(raw string, password string) ([]connectio
 		if err != nil {
 			return nil, err
 		}
-		return a.importConnectionPackagePayload(payload)
+		views, err := a.importConnectionPackagePayload(payload)
+		if err != nil {
+			return nil, err
+		}
+		return sanitizeSavedConnectionViews(views), nil
 	}
 
 	var legacy []connection.LegacySavedConnection