feat: 全自动安装 — 探测数据网卡并绑定出口

- 驱动/名称/次默认路由/非默认口 评分探测
- install.sh 无参数：探测→写配置→装内核→启动→验证
- cpxy rebind 重插卡后重新绑定
- 自动生成 PANEL_SECRET；可选 apt 装依赖

cpxy

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT="$(cd "$(dirname "$0")" && pwd)"
+cmd="${1:-help}"
+shift || true
+case "$cmd" in
+  detect)   exec "$ROOT/scripts/detect.sh" "$@" ;;
+  generate) exec "$ROOT/scripts/generate.sh" "$@" ;;
+  install)  exec "$ROOT/scripts/install.sh" "$@" ;;
+  verify)   exec "$ROOT/scripts/verify.sh" "$@" ;;
+  fetch)    exec "$ROOT/scripts/fetch-binaries.sh" "$@" ;;
+  help|*)
+    cat <<H
+./cpxy <cmd>
+  detect | generate | install | verify | fetch
+
+语义: 走本代理的连接一律从数据网卡出口（系统默认仍可走 WiFi）
+H
+    ;;
+esac