feat(routing): 域名级系统锁冲突提示 + 重置默认按钮 + 客户端 follow-up 清理

承接 FT-A(GET /v1/me/routing 含只读 system_locked_domains)。

- RoutingProfile 加只读 systemLockedDomains(fromJson 读/toJson 不输出);
  routing_screen 冲突检测扩展到域名类规则(domain/domain_suffix/domain_keyword
  命中锁定域名 → systemLocked),ip_cidr 私网启发式保留。
- RoutingProfile.defaults() + RoutingProfileNotifier.resetToDefault()(复用
  _persist:乐观更新/失败回滚/存成功后自动重连,保留只读 systemLockedDomains
  不丢)+ routing_screen 加「重置默认」按钮与二次确认弹层(新增 3 个 l10n 键)。
- RoutingRule.copyWith 用哨兵支持 note 显式清空为 null;RoutingRule/Builtin/
  RoutingProfile 加值相等 operator==/hashCode。
- T8 smartRouteSub 清理:grep 全仓发现 design/prototype/i18n/alias.json →
  gen_proto_i18n.mjs(CI 漂移闸)仍有活引用,按计划口径不删,详见
  .superpowers/sdd/task-FTB-report.md。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

client/test/widget/routing_screen_test.dart

@@ -103,11 +103,101 @@ void main() {
 
     expect(find.text(StringsZh().routingRuleShadowed), findsOneWidget);
   });
+
+  testWidgets('a domain rule matching a system-locked domain is flagged forced', (tester) async {
+    final profile = RoutingProfile.fromJson({
+      'mode': 'rule',
+      'builtin': {'china_direct': true, 'lan_direct': true, 'private_via_tunnel': true},
+      'rules': [
+        {'type': 'domain_suffix', 'value': 'git.yanmeiai.com', 'action': 'direct'},
+      ],
+      'final': 'proxy',
+      'system_locked_domains': ['git.yanmeiai.com'],
+    });
+
+    await tester.pumpWidget(ProviderScope(
+      overrides: [
+        appTextProvider.overrideWithValue(StringsZh()),
+        routingProfileProvider.overrideWith(() => _FakeRoutingNotifier(profile)),
+      ],
+      child: MaterialApp(
+        debugShowCheckedModeBanner: false,
+        theme: PangolinTheme.light,
+        home: const RoutingScreen(),
+      ),
+    ));
+    await tester.pumpAndSettle();
+
+    expect(find.text(StringsZh().routingForcedRow), findsOneWidget);
+  });
+
+  testWidgets('reset button opens confirm dialog and resets on confirm', (tester) async {
+    final profile = RoutingProfile.fromJson({
+      'mode': 'rule',
+      'builtin': {'china_direct': true, 'lan_direct': true, 'private_via_tunnel': true},
+      'rules': [
+        {'type': 'domain_suffix', 'value': 'x.com', 'action': 'direct'},
+      ],
+      'final': 'proxy',
+    });
+
+    final notifier = _FakeRoutingNotifier(profile);
+    await tester.pumpWidget(ProviderScope(
+      overrides: [
+        appTextProvider.overrideWithValue(StringsZh()),
+        routingProfileProvider.overrideWith(() => notifier),
+      ],
+      child: MaterialApp(
+        debugShowCheckedModeBanner: false,
+        theme: PangolinTheme.light,
+        home: const RoutingScreen(),
+      ),
+    ));
+    await tester.pumpAndSettle();
+
+    expect(find.text('x.com'), findsOneWidget);
+
+    // 重置按钮在 FINAL 区之后,滚到可见再点(屏内不止一个 Scrollable,取外层 ListView)。
+    await tester.scrollUntilVisible(
+      find.text(StringsZh().routingReset),
+      200,
+      scrollable: find.byType(Scrollable).first,
+    );
+    await tester.pumpAndSettle();
+    await tester.tap(find.text(StringsZh().routingReset));
+    await tester.pumpAndSettle();
+
+    // 确认弹层出现,取消不触发重置。
+    expect(find.text(StringsZh().routingResetConfirmBody), findsOneWidget);
+    await tester.tap(find.text(StringsZh().devCancel));
+    await tester.pumpAndSettle();
+    expect(notifier.resetCalled, isFalse);
+    expect(find.text('x.com'), findsOneWidget);
+
+    // 再次点击并确认 → 触发重置。
+    await tester.tap(find.text(StringsZh().routingReset));
+    await tester.pumpAndSettle();
+    await tester.tap(find.text(StringsZh().routingResetConfirmAction));
+    await tester.pumpAndSettle();
+
+    expect(notifier.resetCalled, isTrue);
+    expect(find.text('x.com'), findsNothing);
+  });
 }
 
 class _FakeRoutingNotifier extends RoutingProfileNotifier {
   _FakeRoutingNotifier(this._v);
   final RoutingProfile _v;
+  bool resetCalled = false;
+
   @override
   Future<RoutingProfile> build() async => _v;
+
+  /// 绕过真实 _persist(需要 accountApiProvider/网络),只验证「确认后触发重置」的
+  /// UI 交互链路;真正的 _persist 复用行为由 routing_provider_test.dart 覆盖。
+  @override
+  Future<void> resetToDefault() async {
+    resetCalled = true;
+    state = AsyncData(RoutingProfile.defaults().copyWith(systemLockedDomains: _v.systemLockedDomains));
+  }
 }