fix(fmt): default the AnyTLS and Naive port to 443 when the link omits it - #10504

…s it (2dust#10504)

The AnyTLS URI scheme makes the port optional and defaults it to 443,
and two of its three examples leave it out. The naive+https:// and
naive+quic:// link format does the same: the port is omitted when it is
443, and none of its examples carries one.

System.Uri answers -1 for an unregistered scheme with no port, so these
links were imported with Port = -1 and the profile failed IsValid().
Apply the same default Hysteria2Fmt already uses (2dust#10026). An explicit
":0" is still kept as 0.

Co-authored-by: Claude Opus 5.5 <[email protected]>

Brings in 2dust/v2rayN up to e3457fa (still 7.25.6):
- Native AOT (2dust#10295, 2dust#10513): JSON through a source-generated
  context, trimming roots, and AOT zips of the Windows desktop, Linux
  and macOS builds; ReactiveUI 26 (2dust#10249) and ProDataGrid (2dust#10347);
- a pre-resolver per subscription (2dust#10220), MASQUE WARP (2dust#10498), the
  XDRIVE transport (2dust#10546), sing-box TUN dns_mode (2dust#10336) and an AUTO
  bind interface (2dust#10519);
- the download refactor with Downloader 6 (2dust#10534), subscription
  profiles kept on a failed import (2dust#10429), repeated test results
  kept (2dust#10466), share-link fixes (2dust#10504, 2dust#10505, 2dust#10520, 2dust#10526),
  udphop (2dust#10550), REALITY fragments (2dust#10428), and the WebAPI's
  restart deadline (2dust#10516) and macOS instance lock (2dust#10454);
- Linux packages cross-built for x64, arm64, riscv64, ppc64le and
  loong64 in one job, plus x86 packages (2dust#10487, 2dust#10537), and a daily
  certificate update workflow (2dust#10497).

Where upstream changed code PattN had changed:
- no IPv6 FakeIP setting (2dust#10464): PattN writes no fakedns block, so
  Xray-core uses its default IPv4 and IPv6 pools, and sing-box gets an
  IPv6 range on its own; FakeIPUtils and its tests go;
- 2dust#10485's DNS change is not taken: PattN asks each direct group's
  servers in turn and ends the query on the last;
- the TUN inbound copies the inbound's sniffing (2dust#10460) without
  forcing routeOnly;
- MASQUE: upstream's editor and import, which no longer clear or lock
  the TLS options: the fork core speaks HTTP/2 over TLS when the ALPN
  has h2 but not h3, so they apply there;
- the WebAPI restart: upstream's polling fix (2dust#10516) replaces PattN's
  own wait.

Adapted to the AOT JSON and the download refactor: Aether's DNS, the
share-link JSON options, the outbound tag check and the Psiphon test
fixtures go through the source-generated context; the Aether test only
says whether to measure speed, and its IP lookup uses a download
service on the tunnel's proxy; the rule-set 404 skip moves into the new
download helper.

Release workflows and Linux packaging scripts take upstream's layout
with PattN's names and bundles: every Linux architecture builds on each
release (exotic_arch is gone; patterniha/Aether has builds for x64 and
arm64 only), the deb packages keep the cores' execute bits (2dust#10335),
which 2dust#10537's rewrite dropped, and the certificate workflow runs only
upstream.

Conflicts:
- resx: both sets of strings.
- SubEditWindow: upstream's pre-resolver row among PattN's rows.
- AddServerViewModelTests: upstream's; PattN's preset tests move to
  AddServerViewModelPresetTests.
- CoreConfigV2rayIPNetworkTests: without upstream's fakedns pool test.
- README: PattN's.