Sync managed gateway routes on startup and fix layout initialization

backend/main.go

@@ -115,6 +115,9 @@ func main() {
 	if err := tlsservice.Start(r, dataDir); err != nil {
 		log.Fatalf("HTTPS/ACME 启动失败: %v", err)
 	}
+	if err := srv.RefreshManagedGatewayOnStart(); err != nil {
+		log.Printf("Nginx 路由白名单同步失败，仍可通过本机入口检查: %v", err)
+	}
 
 	addr := os.Getenv("VPN_LISTEN_ADDR")
 	if addr == "" {