feat: upstream-backed profiles and client policy groups

[lonecoding]

Complete Quantumult X profiles now load upstream rule lists and client-provided LAN/China IP resources. The homepage describes the policy groups users actually operate: 11 in the recommended profile and 20 in the extended profile, with custom combinations available through the generator.

• Bind all 18 remote rule lists directly to blackmatrix7 resources. Advertising uses AdvertisingLite; Copilot uses its upstream list. The KOP-XIAO resource parser remains configured.
• Keep Direct fixed, advertising and hijacking independently controlled, and YouTube following Google by default while supporting a separate node selection. AI aggregates OpenAI, Claude, Gemini and Copilot resources.
• Keep full.conf and daily.conf identical to recommended.conf. Existing standalone rule URLs remain available and have a separate compatibility index and offline test fixture; complete profiles do not import them.
• Document upstream overlap, migration, defaults and the difference between resource names and policy groups.

Validation: 11 JavaScript tests including all 32,768 group combinations; 28 Python tests; 34 standalone compatibility routing cases; generated-file and whitespace checks; all external configuration URL checks passed. Quantumult X device testing has not been performed.

Upgrade: back up the device configuration, import or merge the new profile, restore personal subscriptions and exceptions, and refresh all resources. The full/daily compatibility URLs now provide the recommended profile, so existing users should review its DNS, policy and regional-routing defaults. Upstream coverage may differ from previous versions; Copilot includes shared OpenAI domains and IP-ASN ranges.