fix(cloudflare-proxy): handle WebSocket upgrade in Worker without body/redirect

Enhance Space Privacy Detection, Proxy Defaults, and Environment Builder UX

refactor: update default allowed domains, unify domain filtering logic, and remove UptimeRobot setup UI from health server

refactor: redirect Cloudflare proxy setup logs and error messages to stderr

Harden config build, speed up startup, add healthcheck

feat: add query parameter support for proxy target/key and ensure unbuffered gateway logging

feat: add undici library patching support and improve URL parsing robustness in cloudflare proxy

refactor: simplify proxy logic by removing undici patching and add unauthenticated fallback for Telegram bot API paths

feat: expand Cloudflare proxy support to include Discord and Google services while streamlining configuration settings

feat: enable worker subdomain and preview functionality during cloudflare proxy setup

feat: add ACP plugin configuration toggle and strip host header from proxy requests

refactor: rename CLOUDFLARE_API_TOKEN to CLOUDFLARE_WORKERS_TOKEN for proxy configuration

feat: replace DNS fix with automated Cloudflare outbound proxy provisioning for blocked network requests