docs(readme): 按用户令删除全部离线档案描述；门禁口径改为 main 推送 + PR

- 合规条里「Offline profiles cannot play online / 本地离线档案仅限本地与隔离网络测试」整条删除，
  只保留正面陈述「联机游玩需要 Microsoft 账户与有效的游戏权益」
- 模块地图 auth 行去掉「local offline profiles / 本地离线档案」，只留 Microsoft 正版登录全链路
- 全文 grep offline|离线|隔离网络 零命中；不做「不支持离线」的反向承诺，也不暗示别的账户通道
- 顺手修 nit：CI 段「Every push」→「Every push to main and every pull request」
  （ci.yml on.push 限 main 分支，非 main 且无 PR 时门禁不跑）

README.md

@@ -17,9 +17,7 @@ attached to other agent tooling as an MCP server.
   entitlement. There is no other account provider.
 - **Credentials stay on your machine.** Account tokens are stored locally only, are never sent to
   any server operated by this project, and the AI features cannot read them.
-- **Playing online requires a Microsoft account.** A local offline profile performs no Microsoft
-  authentication and contacts no Microsoft or Mojang service; it exists for local and
-  isolated-network testing only and is not an online-play path.
+- **Online play requires a Microsoft account and a valid game entitlement.**
 - ULL does not distribute, mirror, proxy or modify any Minecraft game files.
 - Not affiliated with Mojang or Microsoft.
 
@@ -109,7 +107,7 @@ The eight modules of `crates/core`:
 | `download` | multi-source health scoring, mirrors, chunked downloads, hash-while-downloading |
 | `game` | version / instance repository, snapshots and inheritance resolution |
 | `launch` | 10-stage launch pipeline, processes, JSONL event stream |
-| `auth` | Microsoft sign-in / local offline profiles |
+| `auth` | Microsoft sign-in (OAuth 2.0 device code → Xbox Live → XSTS → Minecraft Services) |
 | `addon` | mod loader installation, modpacks, CurseForge / Modrinth |
 | `diagnose` | five signal collectors, YAML rule engine, hs_err parsing |
 | `platform` | OS abstraction: paths, processes, file locks, capability probing, runtime OS detection |
@@ -153,10 +151,11 @@ Dependency license check (optional locally, required in CI):
 
 ## CI gates
 
-Every push runs fmt / clippy (warnings are errors) / the full test suite, and the Linux headless
-render smoke is a hard gate on the same footing: a red result blocks the merge. The macOS runtime
-probe is not there yet — it only runs on a manual `workflow_dispatch` and its result is recorded,
-not enforced (`continue-on-error`), until the slot passes a first run on a real runner.
+Every push to `main` and every pull request runs fmt / clippy (warnings are errors) / the full test
+suite, and the Linux headless render smoke is a hard gate on the same footing: a red result blocks
+the merge. The macOS runtime probe is not there yet — it only runs on a manual `workflow_dispatch`
+and its result is recorded, not enforced (`continue-on-error`), until the slot passes a first run on
+a real runner.
 
 | Workflow | Content |
 |----------|---------|

README.zh-CN.md

@@ -14,8 +14,7 @@ Unlucky Launcher（ULL）是一个用 Rust 写的免费开源 Minecraft: Java
 - **只走 Microsoft 正版登录**：认证是 Microsoft OAuth 2.0 device code flow → Xbox Live → XSTS →
   `api.minecraftservices.com`，用的是玩家自己的 Microsoft 账户与自己已购的游戏权益，没有别家账户通道。
 - **凭据只存本机**：账户令牌只保存在本机，不上传本项目运营的任何服务器，AI 功能也读不到。
-- **联机游玩必须使用 Microsoft 账户**：本地离线档案不做 Microsoft 认证、不连任何 Microsoft / Mojang
-  服务，仅限本地与隔离网络环境的测试，它不是联机游玩的门路。
+- **联机游玩需要 Microsoft 账户与有效的游戏权益。**
 - 不分发、不镜像、不代理、不修改任何 Minecraft 游戏文件。
 - 与 Mojang、Microsoft 无关联。
 
@@ -95,7 +94,7 @@ Unlucky-Launcher (cargo workspace)
 | `download` | 多源健康度、镜像、分块下载、边下边算 |
 | `game` | 版本/实例仓库、快照与继承解析 |
 | `launch` | 10 阶段启动管线、进程、JSONL 事件流 |
-| `auth` | Microsoft 正版登录 / 本地离线档案 |
+| `auth` | Microsoft 正版登录（OAuth 2.0 device code → Xbox Live → XSTS → Minecraft Services） |
 | `addon` | 加载器安装、整合包、CurseForge / Modrinth |
 | `diagnose` | 五类信号采集、YAML 规则引擎、hs_err 解析 |
 | `platform` | OS 抽象：路径、进程、文件锁、能力探测、运行期 OS 检测 |
@@ -134,9 +133,9 @@ cargo build --release                                  # 三个 bin 都落在 ta
 
 ## CI 门禁
 
-每次推送都跑 fmt / clippy（warnings 视为错误）/ 全量测试，Linux 无头渲染冒烟与它们同级、是硬门禁：
-红了就不许合。macOS 运行期探针还不算——它只在手动 `workflow_dispatch` 时跑，结果留证据但不作为
-流水线结论（`continue-on-error`），直到该槽位在真实 runner 上首跑通过。
+每次推送到 `main` 与每个 PR 都跑 fmt / clippy（warnings 视为错误）/ 全量测试，Linux 无头渲染冒烟
+与它们同级、是硬门禁：红了就不许合。macOS 运行期探针还不算——它只在手动 `workflow_dispatch` 时跑，
+结果留证据但不作为流水线结论（`continue-on-error`），直到该槽位在真实 runner 上首跑通过。
 
 | Workflow | 内容 |
 |----------|------|