v1.4.3

Highlights

• Upstream errors are no longer a black box: failures such as 401/403 record the upstream business code (e.g. 11140 request illegal) and the sanitized full error JSON (256 KiB cap by default) into the audit trail, and hovering the auth status on the credentials page shows the last upstream body.
• Accounts terminally rejected upstream are disabled automatically: the 11140 restriction, consecutive business refresh-token rejections and repeated 401s against a just-refreshed token all flow into the WebUI disable path with their evidence retained; resetting cooldowns or re-enabling returns the account to a fresh state.
• Automatic and manual disables are clearly separated: the badge distinguishes 人工停用 from 自动禁用 while the switch stays a plain toggle, and the provenance (reason, body, time) persists in the control store across restarts.

What's Changed

• Record upstream error bodies and auto-disable terminally rejected accounts by @maiphucgiang in #93

Full Changelog: v1.4.2...v1.4.3