feat: add built-in proxy PASS-RULE

[echs-top]

与PASS的区别是：在sub-rule中命中PASS-RULE时不会跳出子规则，仅跳过当前命中规则分支，继续在sub-rule中向后匹配规则。

参考用途示例：

rules:
  - DST-PORT,53/853,DNS劫持
  - DST-PORT,5228-5230,直接连接
  - RULE-SET,private_ip,直接连接,no-resolve
  - RULE-SET,private,直接连接
  - RULE-SET,ads,REJECT
  - SUB-RULE,(RULE-SET,ai),sub-ai
  - SUB-RULE,(RULE-SET,telegram),sub-telegram
  - RULE-SET,proxy@direct,直接连接
  - SUB-RULE,(RULE-SET,proxy-lite),sub-proxy
  - RULE-SET,cn-lite,直接连接
  - SUB-RULE,(RULE-SET,telegram_ip),sub-telegram
  - RULE-SET,cn_ip,直接连接
  - AND,((NETWORK,udp),(DST-PORT,443)),代理QUIC
  - MATCH,代理连接
sub-rules:
  sub-ai:
    - AND,((NETWORK,udp),(DST-PORT,443)),代理QUIC
    - MATCH,国外AI
  sub-telegram:
    - AND,((NETWORK,udp),(DST-PORT,443)),代理QUIC
    - MATCH,TELEGRAM
  sub-proxy:
    - AND,((NETWORK,udp),(DST-PORT,443)),代理QUIC
    - MATCH,代理连接
proxy-groups:
- { name: 代理QUIC, type: select, proxies: [PASS-RULE,REJECT] }

优点：可通过策略组快速决定是否禁用代理QUIC流量；规则匹配效率高，可不重复匹配规则（之前想实现类似效果要么将禁用quic写死到规则中，要么需要匹配两次同一规则才行）