V2.0.1: listen override fix, sing-box core fetch, probe settings page + fast report, spx removal, core mem env

- 0: sing-box gen overrides fragment listen/port from the inbound row
  (empty listen -> "::"), Update/Add recompute the stored fragment;
  non-loopback E2E against the real core binary.
- 1: agent fetches the sing-box core from the Gitea release when
  missing, self-checks it, and only then latches the switch.
- 2: node list shows the sing-box core version (heartbeat field,
  persisted on the node row), xray version as fallback.
- 3: public-page fallback returns 404 to anonymous visitors when the
  page is disabled.
- 4: settings restart hint bar removed, dead i18n keys cleaned.
- 5: two PUT calls missing JSON headers fixed (audit: only those two),
  batch probe-task creation endpoint + UI.
- 6: cf-probe retirement card and coverage pipeline removed.
- 7: generated vless links no longer carry spx (panel export + sub);
  parser still accepts spx; golden fixtures updated.
- probe batch: dedicated probe settings tab (public-page settings,
  tasks, per-node meta), retention_days editable, per-node traffic
  calibration + stat-interface pinning, runtime metrics split into a
  lightweight fast report (default 3s, 1-60s adjustable).
- 8: sing-box core processes start with GOMEMLIMIT=32MiB, GOGC=50.
- 9: dead /getTwoFactorEnable docs entries removed (frontend call and
  contract entry already gone at base; verified by grep).

internal/web/controller/probe_notify.go

@@ -5,7 +5,6 @@ import (
 	"net/http"
 
 	"github.com/mhsanaei/3x-ui/v3/internal/web/entity"
-	"github.com/mhsanaei/3x-ui/v3/internal/web/service"
 	"github.com/mhsanaei/3x-ui/v3/internal/web/service/probenotify"
 
 	"github.com/gin-gonic/gin"
@@ -13,12 +12,12 @@ import (
 
 // Item 7 B6: the notification settings surface — the notify_* block
 // (offline grace, traffic step, expiry window, login alerts, the
-// webhook channel and the two message templates), a test send, and
-// the cf-probe retirement coverage the operator checks before
-// standing the old probe fleet down. Like the rest of the probe
-// surfaces these endpoints answer in the panel's Msg envelope and
-// take effect immediately; validation refusals are operator-facing
-// text, shown verbatim.
+// webhook channel and the two message templates) and a test send.
+// Like the rest of the probe surfaces these endpoints answer in the
+// panel's Msg envelope and take effect immediately; validation
+// refusals are operator-facing text, shown verbatim. (The cf-probe
+// retirement coverage card that originally rode this payload was
+// removed in V2.0.1 ⑥ — the checklist lives in the operator docs.)
 
 type ProbeNotifyController struct{}
 
@@ -31,14 +30,12 @@ func NewProbeNotifyController(g *gin.RouterGroup) *ProbeNotifyController {
 }
 
 type probeNotifyPayload struct {
-	Settings probenotify.SettingsView   `json:"settings"`
-	Coverage []service.ProbeCoverageRow `json:"coverage"`
+	Settings probenotify.SettingsView `json:"settings"`
 }
 
 func (pc *ProbeNotifyController) get(c *gin.Context) {
 	jsonObj(c, probeNotifyPayload{
 		Settings: probenotify.GetSettings(),
-		Coverage: service.ProbeAgentCoverage(),
 	}, nil)
 }
 
@@ -59,7 +56,6 @@ func (pc *ProbeNotifyController) put(c *gin.Context) {
 	// the channel status and secret-set flags from it.
 	jsonObj(c, probeNotifyPayload{
 		Settings: probenotify.GetSettings(),
-		Coverage: service.ProbeAgentCoverage(),
 	}, nil)
 }