feat: Phase 1 WinAuth Go 移植完整实现

将原 C#/.NET WinAuth 移植为 Go + Gio GUI，覆盖 Phase 1 全部功能。

核心模块：
- internal/authenticator: TOTP (Google/Microsoft/Okta) + HOTP + BattleNet + Steam，含
  enroll/sync/code 生成、Steam 交易确认轮询
- internal/config: YAML 配置 + 老版 WinAuth XML 导入（DPAPI + Password + Blowfish/PBKDF2 解密链）
- internal/crypto: 现代加密 (WAGO1) + DPAPI 跨平台封装 + 老版 Blowfish ECB
- internal/win32: 单实例 Mutex 锁 + 全局热键管理器 (RegisterHotKey + PeekMessage 泵) +
  SendInput Unicode 注入 + 剪贴板文本/CF_DIB 图像读写 + AttachThreadInput 焦点切换
- internal/hotkey: "Ctrl+Alt+G" 风格快捷键字符串解析/格式化
- internal/qr: gozxing 二维码解码 + otpauth:// URI 解析
- internal/i18n: en/zh-CN/de 三语 TOML

UI 模块 (Gio)：
- 主窗口：圆环倒计时进度条、复制按钮 + Toast 反馈、空列表占位、行分隔线
- 添加流程：vendor 菜单 + 各 vendor 独立对话框 + 二维码扫描入口（文件 / 剪贴板）
- 设置：密码加密、老版 XML 导入、每条目热键配置
- Steam：注册向导（含 captcha/email/SMS 多步）+ 交易确认窗

构建：Windows 主目标，非 Windows 平台所有 Win32 功能走 build-tag 桩实现。

internal/logging/logging.go

@@ -0,0 +1,94 @@
+package logging
+
+import (
+	"fmt"
+	"io"
+	"os"
+	"strings"
+
+	"github.com/sirupsen/logrus"
+
+	"git.wxccs.org/iceking2nd/winauth-go/internal/global"
+)
+
+// Options controls logger initialization from CLI flags.
+type Options struct {
+	// Level is one of: panic, fatal, error, warn, info, debug, trace.
+	// Numeric forms (0..6) are also accepted to mirror the legacy convention
+	// used in CLAUDE.local.md ("Trace(6)", "Debug(5)").
+	Level string
+
+	// File, if non-empty, enables file logging in addition to console output.
+	// The file is opened with append + create semantics.
+	File string
+
+	// Console forces console output to be visible. On Windows this is the
+	// signal used by the cobra entry point to allocate / show a console
+	// window for a GUI build. The logger itself always writes to stderr; this
+	// field is kept here so that the entry point can read it through the
+	// same Options struct.
+	Console bool
+}
+
+// Init configures the global.Log logger according to opts.
+// Returns the opened file handle (or nil) so the caller can close it on exit.
+func Init(opts Options) (io.Closer, error) {
+	const fn = "internal.logging.Init"
+
+	lvl, err := parseLevel(opts.Level)
+	if err != nil {
+		return nil, err
+	}
+
+	global.Log.SetLevel(lvl)
+	global.Log.SetFormatter(&logrus.TextFormatter{
+		FullTimestamp:   true,
+		TimestampFormat: "2006-01-02 15:04:05.000",
+		DisableQuote:    false,
+	})
+
+	var closer io.Closer
+	if strings.TrimSpace(opts.File) != "" {
+		f, ferr := os.OpenFile(opts.File, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0o644)
+		if ferr != nil {
+			return nil, fmt.Errorf("open log file %q: %w", opts.File, ferr)
+		}
+		global.Log.SetOutput(io.MultiWriter(os.Stderr, f))
+		closer = f
+	} else {
+		global.Log.SetOutput(os.Stderr)
+	}
+
+	global.Log.WithField("func", fn).
+		WithField("level", lvl.String()).
+		WithField("file", opts.File).
+		Debug("logger initialized")
+
+	return closer, nil
+}
+
+// parseLevel accepts either the textual logrus level names or the numeric
+// 0..6 form used in CLAUDE.local.md.
+func parseLevel(s string) (logrus.Level, error) {
+	s = strings.TrimSpace(strings.ToLower(s))
+	if s == "" {
+		return logrus.InfoLevel, nil
+	}
+	switch s {
+	case "0", "panic":
+		return logrus.PanicLevel, nil
+	case "1", "fatal":
+		return logrus.FatalLevel, nil
+	case "2", "error":
+		return logrus.ErrorLevel, nil
+	case "3", "warn", "warning":
+		return logrus.WarnLevel, nil
+	case "4", "info":
+		return logrus.InfoLevel, nil
+	case "5", "debug":
+		return logrus.DebugLevel, nil
+	case "6", "trace":
+		return logrus.TraceLevel, nil
+	}
+	return logrus.InfoLevel, fmt.Errorf("unknown log level %q", s)
+}