feat: Add Web UI for account and quota management

## Summary
Add an optional Web UI for managing accounts and monitoring quotas.
WebUI is implemented as a modular plugin with minimal changes to server.js (only 5 lines added).

## New Features
- Dashboard: Real-time model quota visualization with Chart.js
- Accounts: OAuth-based account management (add/enable/disable/refresh/remove)
- Logs: Live server log streaming via SSE with search and level filtering
- Settings: System configuration with 4 tabs
  - Interface: Language (EN/zh_CN), polling interval, log buffer size, display options
  - Claude CLI: Proxy connection config, model selection, alias overrides (~/.claude.json)
  - Models: Model visibility and ordering management
  - Server Info: Runtime info and account config reload

## Technical Changes
- Add src/webui/index.js as modular plugin (all WebUI routes encapsulated)
- Add src/config.js for centralized configuration (~/.config/antigravity-proxy/config.json)
- Add authMiddleware for optional password protection (WEBUI_PASSWORD env var)
- Enhance logger with EventEmitter for SSE log streaming
- Make constants configurable via config.json
- Merge with main v1.2.6 (model fallback, cross-model thinking)
- server.js changes: only 5 lines added to import and mount WebUI module

## Bug Fixes
- Fix Alpine.js $watch error in settings-store.js (not supported in store init)
- Fix "OK" label to "SUCCESS" in logs filter
- Add saveSettings() calls to settings toggles for proper persistence
- Improve Claude CLI config robustness (handle empty/invalid JSON files)
- Add safety check for empty config.env in claude-config component
- Improve config.example.json instructions with clear Windows/macOS/Linux paths

## New Files
- src/webui/index.js - WebUI module with all API routes
- public/ - Complete Web UI frontend (Alpine.js + TailwindCSS + DaisyUI)
- src/config.js - Configuration management
- src/utils/claude-config.js - Claude CLI settings helper
- tests/frontend/ - Frontend test suite

## API Endpoints Added
- GET/POST /api/config - Server configuration
- GET/POST /api/claude/config - Claude CLI configuration
- POST /api/models/config - Model alias/hidden settings
- GET /api/accounts - Account list with status
- POST /api/accounts/:email/toggle - Enable/disable account
- POST /api/accounts/:email/refresh - Refresh account token
- DELETE /api/accounts/:email - Remove account
- GET /api/logs - Log history
- GET /api/logs/stream - Live log streaming (SSE)
- GET /api/auth/url - OAuth URL generation
- GET /oauth/callback - OAuth callback handler

## Backward Compatibility
- Default port remains 8080
- All existing CLI/API functionality unchanged
- WebUI is entirely optional
- Can be disabled by removing mountWebUI() call

public/js/components/account-manager.js

@@ -0,0 +1,104 @@
+/**
+ * Account Manager Component
+ * Registers itself to window.Components for Alpine.js to consume
+ */
+window.Components = window.Components || {};
+
+window.Components.accountManager = () => ({
+    async refreshAccount(email) {
+        Alpine.store('global').showToast(`Refreshing ${email}...`, 'info');
+        const password = Alpine.store('global').webuiPassword;
+        try {
+            const { response, newPassword } = await window.utils.request(`/api/accounts/${encodeURIComponent(email)}/refresh`, { method: 'POST' }, password);
+            if (newPassword) Alpine.store('global').webuiPassword = newPassword;
+
+            const data = await response.json();
+            if (data.status === 'ok') {
+                Alpine.store('global').showToast(`Refreshed ${email}`, 'success');
+                Alpine.store('data').fetchData();
+            } else {
+                Alpine.store('global').showToast(data.error || 'Refresh failed', 'error');
+            }
+        } catch (e) {
+            Alpine.store('global').showToast('Refresh failed: ' + e.message, 'error');
+        }
+    },
+
+    async toggleAccount(email, enabled) {
+        const password = Alpine.store('global').webuiPassword;
+        try {
+            const { response, newPassword } = await window.utils.request(`/api/accounts/${encodeURIComponent(email)}/toggle`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ enabled })
+            }, password);
+            if (newPassword) Alpine.store('global').webuiPassword = newPassword;
+
+            const data = await response.json();
+            if (data.status === 'ok') {
+                Alpine.store('global').showToast(`Account ${email} ${enabled ? 'enabled' : 'disabled'}`, 'success');
+                Alpine.store('data').fetchData();
+            } else {
+                Alpine.store('global').showToast(data.error || 'Toggle failed', 'error');
+            }
+        } catch (e) {
+            Alpine.store('global').showToast('Toggle failed: ' + e.message, 'error');
+        }
+    },
+
+    async fixAccount(email) {
+        Alpine.store('global').showToast(`Re-authenticating ${email}...`, 'info');
+        const password = Alpine.store('global').webuiPassword;
+        try {
+            const urlPath = `/api/auth/url?email=${encodeURIComponent(email)}`;
+            const { response, newPassword } = await window.utils.request(urlPath, {}, password);
+            if (newPassword) Alpine.store('global').webuiPassword = newPassword;
+
+            const data = await response.json();
+            if (data.status === 'ok') {
+                window.open(data.url, 'google_oauth', 'width=600,height=700,scrollbars=yes');
+            } else {
+                Alpine.store('global').showToast(data.error || 'Failed to get auth URL', 'error');
+            }
+        } catch (e) {
+            Alpine.store('global').showToast('Failed: ' + e.message, 'error');
+        }
+    },
+
+    async deleteAccount(email) {
+        if (!confirm(Alpine.store('global').t('confirmDelete'))) return;
+        const password = Alpine.store('global').webuiPassword;
+        try {
+            const { response, newPassword } = await window.utils.request(`/api/accounts/${encodeURIComponent(email)}`, { method: 'DELETE' }, password);
+            if (newPassword) Alpine.store('global').webuiPassword = newPassword;
+
+            const data = await response.json();
+            if (data.status === 'ok') {
+                Alpine.store('global').showToast(`Deleted ${email}`, 'success');
+                Alpine.store('data').fetchData();
+            } else {
+                Alpine.store('global').showToast(data.error || 'Delete failed', 'error');
+            }
+        } catch (e) {
+            Alpine.store('global').showToast('Delete failed: ' + e.message, 'error');
+        }
+    },
+
+    async reloadAccounts() {
+        const password = Alpine.store('global').webuiPassword;
+        try {
+            const { response, newPassword } = await window.utils.request('/api/accounts/reload', { method: 'POST' }, password);
+            if (newPassword) Alpine.store('global').webuiPassword = newPassword;
+
+            const data = await response.json();
+            if (data.status === 'ok') {
+                Alpine.store('global').showToast('Accounts reloaded', 'success');
+                Alpine.store('data').fetchData();
+            } else {
+                Alpine.store('global').showToast(data.error || 'Reload failed', 'error');
+            }
+        } catch (e) {
+            Alpine.store('global').showToast('Reload failed: ' + e.message, 'error');
+        }
+    }
+});