fix(macos): killswitch 撤掉 includeAllNetworks(堵死整机网络) — 改 enforceRoutes+on-demand

实测 includeAllNetworks=true 把所有流量(含 sing-box 连服务器握手、app 调控制面
请求)在隧道建起前就塞进隧道 → 握手出不去 → 连接失败 + on-demand 死循环 + 整机
断网(连「我的」页账户信息都拉不到、显示 —)。

改为不会误伤握手/控制面的组合:
- configureKillSwitch:includeAllNetworks 恒 false;保留 enforceRoutes(连接期防漏)
  + excludeLocalNetworks + NEOnDemandRule 常开(兜重连)
- 撤回 start() 的 killSwitch option 及扩展侧 includeAllNetworks 透传(回 false)
- 诚实标注:当前 L1→L2 之间,未到 includeAllNetworks-L3;要拿「扛进程被杀」须先
  在扩展内放行服务器/控制面连接,留待真机验证

docs/killswitch-design.html: §6.5 加踩坑修正、状态表 macOS 改「L1→L2 之间」

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

client/macos/PacketTunnel/PacketTunnelProvider.swift

@@ -63,12 +63,7 @@ final class PacketTunnelProvider: NEPacketTunnelProvider {
                 LibboxSetup(setup, &setupErr)
                 if let setupErr { throw setupErr }
 
-                // KillSwitch:主 app 经 startVPNTunnel options 下发;OS on-demand 自动拉起时
-                // options 为 nil → 默认 true(on-demand 仅在 killswitch 开时存在)。libbox 平台回调
-                // includeAllNetworks() 据此与 NE 层 includeAllNetworks 对齐,避免装绕行路由。
-                let killSwitch = (options?["killSwitch"] as? NSNumber)?.boolValue ?? true
-                log.info("startTunnel: killSwitch=\(killSwitch, privacy: .public)")
-                let platform = PangolinPlatformInterface(provider: self, includeAllNetworks: killSwitch)
+                let platform = PangolinPlatformInterface(provider: self)
                 self.platform = platform
 
                 var newErr: NSError?
@@ -187,11 +182,9 @@ final class PangolinPlatformInterface: NSObject, LibboxPlatformInterfaceProtocol
     private var monitor: NWPathMonitor?
     private var defaultInterfaceIndex: Int32 = -1
     private let monitorQueue = DispatchQueue(label: "pangolin.tunnel.pathmonitor")
-    private let includeAllNetworksFlag: Bool
 
-    init(provider: NEPacketTunnelProvider, includeAllNetworks: Bool) {
+    init(provider: NEPacketTunnelProvider) {
         self.provider = provider
-        self.includeAllNetworksFlag = includeAllNetworks
         super.init()
     }
 
@@ -276,7 +269,7 @@ final class PangolinPlatformInterface: NSObject, LibboxPlatformInterfaceProtocol
     // MARK: 其余协议方法(取合理默认)
     func underNetworkExtension() -> Bool { true }
     func useProcFS() -> Bool { false }
-    func includeAllNetworks() -> Bool { includeAllNetworksFlag }
+    func includeAllNetworks() -> Bool { false }
     func clearDNSCache() {}
     func readWIFIState() -> LibboxWIFIState? { nil }
     func systemCertificates() -> (any LibboxStringIteratorProtocol)? { nil }