feat!: pre-handshake knock on the agent TCP ports; probes get the agent certificate public key [CI]

backend/src/MoShiro.Backend.Application/Models/AgentModels.cs

@@ -28,7 +28,8 @@ public sealed record AgentRecord(
     string? Ipv6DiagnosticsJson = null,
     bool PublicHostManual = false,
     bool Ipv6HostManual = false,
-    IReadOnlyList<string>? ReportedAddresses = null);
+    IReadOnlyList<string>? ReportedAddresses = null,
+    byte[]? TlsPublicKey = null);
 
 /// <summary>管理员可以修改的字段（merge-patch 语义：为 null 的字段不改）。</summary>
 public sealed class AgentPatch
@@ -59,7 +60,8 @@ public sealed record AgentHello(
     IReadOnlyList<int>? ProbeUdpPorts,
     bool Ipv6Supported = false,
     string? Ipv6DiagnosticsJson = null,
-    IReadOnlyList<string>? Addresses = null);
+    IReadOnlyList<string>? Addresses = null,
+    byte[]? TlsPublicKey = null);
 
 /// <summary>注册之后 MoShiro 的补充：公开地址和端口。</summary>
 public sealed record AgentEnrollment(string PublicHost, int ProbeTcpPort, IReadOnlyList<int> ProbeUdpPorts, IReadOnlyList<string> Kinds);