settings trim: remove dead settings, upstream remnants, JSON/Clash subscriptions

Per SETTINGS-AUDIT (all three tiers approved 2026-10-23):

Dead settings:
- panelOutbound, ipLimitAllowlist (+ orphan parser job), outboundDownThreshold
- tg fake events outbound.down/outbound.up/xray.crash (no publisher in lite)
- phantom routing sub-tabs (Happ/Clash/Incy) and subJsonRules direct-rules tab
  (no backend keys); subHideSettings moved to the subscription info tab first

Upstream remnants:
- ldap* / smtp* model+schema keys, EmailNotifications orphan component
- twoFactorEnable/twoFactorToken + login-page probe (no backend handler)
- externalTrafficInform*

Newly approved removals:
- JSON subscription family (producer, routes, UA auto-detect, mux/finalmask/
  observatory) and Clash subscription family (producer, routes, UA detect)
- SubBalancer (table, service, controller, settings tab)
- subThemeDir (subscription page falls back to the built-in template)
- datepicker jalalian option (gregorian only; Persian picker removed)

JSON/Clash endpoints now 404; link-format output pinned by regression tests.
Guarded keys untouched: webListen/webPort/webBasePath/certs, tg* chain,
expireDiff/trafficDiff/tgBotProxy, subHideSettings, pageSize/tgLang.

frontend/src/models/setting.ts

@@ -9,14 +9,12 @@ export class AllSetting {
   webBasePath = '/';
   sessionMaxAge = 360;
   trustedProxyCIDRs = '127.0.0.1/32,::1/128';
-  ipLimitAllowlist = '';
-  panelOutbound = '';
   pageSize = 25;
   expireDiff = 0;
   trafficDiff = 0;
   remarkTemplate = '{{INBOUND}}-{{EMAIL}}|📊{{TRAFFIC_LEFT}}|⏳{{DAYS_LEFT}}D';
   subShowIdentityOnAllLinks = false;
-  datepicker: 'gregorian' | 'jalalian' = 'gregorian';
+  datepicker = 'gregorian' as const;
   tgBotEnable = false;
   tgBotToken = '';
   tgBotAPIServer = '';
@@ -26,97 +24,32 @@ export class AllSetting {
   tgCpu = 80;
   tgMemory = 80;
   tgLang = 'en-US';
-  twoFactorEnable = false;
-  twoFactorToken = '';
   xrayTemplateConfig = '';
   subEnable = true;
-  subJsonEnable = false;
-  subJsonAutoDetect = false;
-  subJsonAlwaysArray = false;
-  subJsonUserAgentRegex = '';
-  subClashAutoDetect = false;
-  subClashUserAgentRegex = '';
   subTitle = '';
   subSupportUrl = '';
   subProfileUrl = '';
   subAnnounce = '';
-  subEnableRouting = false;
-  subRoutingRules = '';
-  subIncyEnableRouting = false;
-  subIncyRoutingRules = '';
   subListen = '';
   subPort = 2096;
   subPath = '/sub/';
-  subJsonPath = '/json/';
-  subClashEnable = false;
-  subClashPath = '/clash/';
   subDomain = '';
-  externalTrafficInformEnable = false;
-  externalTrafficInformURI = '';
   restartXrayOnClientDisable = true;
   subCertFile = '';
   subKeyFile = '';
   subUpdates = 12;
   subEncrypt = true;
   subURI = '';
-  subJsonURI = '';
-  subClashURI = '';
-  subClashEnableRouting = false;
-  subClashRules = '';
-  subJsonMux = '';
-  subJsonRules = '';
-  subJsonFinalMask = '';
-  subJsonObservatory = '';
-  subThemeDir = '';
   subHideSettings = false;
 
   timeLocation = 'Local';
 
-  ldapEnable = false;
-  ldapHost = '';
-  ldapPort = 389;
-  ldapUseTLS = false;
-  ldapInsecureSkipVerify = false;
-  ldapBindDN = '';
-  ldapPassword = '';
-  ldapBaseDN = '';
-  ldapUserFilter = '(objectClass=person)';
-  ldapUserAttr = 'mail';
-  ldapVlessField = 'vless_enabled';
-  ldapSyncCron = '@every 1m';
-  ldapFlagField = '';
-  ldapTruthyValues = 'true,1,yes,on';
-  ldapInvertFlag = false;
-  ldapInboundTags = '';
-  ldapAutoCreate = false;
-  ldapAutoDelete = false;
-  ldapDefaultTotalGB = 0;
-  ldapDefaultExpiryDays = 0;
-  ldapDefaultLimitIP = 0;
   tgEnabledEvents = 'login.attempt,cpu.high';
-  smtpEnable = false;
-  smtpHost = '';
-  smtpPort = 587;
-  smtpUsername = '';
-  smtpPassword = '';
-  smtpFrom = '';
-  smtpFromName = '';
-  smtpTo = '';
-  smtpEncryptionType = 'starttls';
-  smtpEnabledEvents = 'login.attempt,cpu.high';
-  smtpCpu = 80;
-  smtpMemory = 80;
-  outboundDownThreshold = 3;
   hasTgBotToken = false;
-  hasTwoFactorToken = false;
-  hasLdapPassword = false;
   hasApiToken = false;
   hasWarpSecret = false;
   hasNordSecret = false;
-  hasSmtpPassword = false;
   clearTgBotToken = false;
-  clearLdapPassword = false;
-  clearSmtpPassword = false;
 
   constructor(data?: unknown) {
     if (data != null) {
@@ -124,10 +57,6 @@ export class AllSetting {
     }
     const cpu = Math.round(Number(this.tgCpu));
     this.tgCpu = Number.isFinite(cpu) ? Math.min(100, Math.max(0, cpu)) : 80;
-    const threshold = Math.round(Number(this.outboundDownThreshold));
-    this.outboundDownThreshold = Number.isFinite(threshold)
-      ? Math.min(100, Math.max(1, threshold))
-      : 3;
   }
 
   equals(other: AllSetting): boolean {