security: Sentinel 路由鉴权 + API Key CSRF + SSRF 防护

修复:
- Sentinel 路由 require_auth=False → True (严重: 未认证可访问)
- API Key 创建/删除加 csrf_protect=True
- SSRF 防护: 测试连接仅允许 http/https scheme
- 插件网络鉴权: 已加载插件自动放行 (不再要求 plugin.network.access)
- Sentinel 权限列表补充 plugin.network.access

Co-Authored-By: Claude <noreply@anthropic.com>

config/services/network_routes.yaml

@@ -1,4 +1,25 @@
 http_port: 4200
-last_updated: 14102.696182483
-plugin_routes: {}
+last_updated: 16793.540021822
+plugin_routes:
+  sentinel:
+  - methods:
+    - GET
+    path: /sentinel/api/nodes
+    require_auth: true
+  - methods:
+    - POST
+    path: /sentinel/api/nodes
+    require_auth: true
+  - methods:
+    - POST
+    path: /sentinel/api/nodes/test
+    require_auth: true
+  - methods:
+    - POST
+    path: /sentinel/api/nodes/delete
+    require_auth: true
+  - methods:
+    - POST
+    path: /sentinel/api/plugin/sentinel
+    require_auth: true
 websocket_port: 4240