feat(tls): manage ACME domain and add desktop client settings

backend/main.go

@@ -27,6 +27,7 @@ import (
 	"vpn-platform/backend/internal/service/openvpn"
 	"vpn-platform/backend/internal/service/wireguard"
 	"vpn-platform/backend/internal/store"
+	"vpn-platform/backend/internal/tlsservice"
 )
 
 //go:embed all:dist
@@ -111,6 +112,9 @@ func main() {
 	// 状态采集 + 自启恢复
 	monitor.Start(mgr, 15*time.Second)
 	monitor.AutoStartAll(mgr)
+	if err := tlsservice.Start(r, dataDir); err != nil {
+		log.Fatalf("HTTPS/ACME 启动失败: %v", err)
+	}
 
 	addr := os.Getenv("VPN_LISTEN_ADDR")
 	if addr == "" {