fix: WebSocket 鉴权 — Cookie 优先 (支持 HttpOnly)

根因: panel_token 是 HttpOnly cookie, JS getCookie() 读不到
→ 前端 WS ?token= 参数为空 → 认证失败 → 仪表盘无数据

修复:
- _ws_auth_wrapper: Cookie 优先 → query token 备用 → API Key
- 浏览器同源 WS 自动发送 Cookie, 无需 ?token=
- dashboard.js / logs.js 移除多余的 getCookie+?token=

Co-Authored-By: Claude <noreply@anthropic.com>

config/framework/base_config.yaml.bak

@@ -0,0 +1,56 @@
+framework:
+  debug: true
+  name: SenSu
+  version: v0.6.0
+logging:
+  debug_level_file: true
+  level: DEBUG
+  max_file_size: 10MB
+  max_log_files: 20
+plugins:
+  auto_load: true
+  hot_reload: true
+  max_retry_count: 3
+  isolation: true
+# 自动启动脚本 — 框架启动时后台拉起
+auto_start_scripts:
+  enabled: true
+  scripts: []
+  # 示例:
+  # - name: cyrene_debug
+  #   path: ~/cyrene_debug_server.py
+  #   enabled: true
+  #   args: []
+  #   cwd: ~
+# TUI配置
+tui:
+  enabled: true
+  refresh_rate: 30
+  # TUI布局配置
+  layout:
+    grid_rows: "4fr 5fr 1fr"  # 三行布局：日志区域、消息区域、输入区域的比例
+  # TUI样式配置
+  styles:
+    log_area: "border: solid green; overflow-y: auto;"
+    message_area: "border: solid yellow; overflow-y: auto;" 
+    input_area: "border: solid red;"
+  # TUI日志显示配置
+  log_display:
+    max_lines: 200
+# 互联网服务配置
+internet:
+  websocket:
+    host: "0.0.0.0"
+    port: 4240
+    # 其他websocket配置...
+  http:
+    host: "0.0.0.0" 
+    port: 4200
+    # 其他http配置...
+panel:
+  entrance:
+    path: "/SenSu"
+    username: "admin"
+    password: "admin"
+    
+