feat: 一大堆更新，修了一堆bug加了新功能

1. 新增反馈插件、复读插件、戳一戳插件
2. 修复了配置、线程安全、SQL校验等多处bug
3. 重构插件加载系统，支持验证插件+热加载
4. 修复大量测试用例问题，修复了76个测试挂逼的问题
5. 调整了broadcast插件的发送间隔
6. 优化了性能统计的函数命名逻辑
7. 修复了furry插件的注释和函数名错误
8. 重构了输入校验的逻辑顺序
9. 配置文件新增了默认值处理

src/neobot/web_static/changelog.html

@@ -97,7 +97,7 @@
             
             <div class="flex items-center gap-4 text-[10px] font-mono text-gray-400 uppercase tracking-widest">
                 <span class="px-2 py-1 rounded border border-white/10 bg-white/5">Changelog</span>
-                <span>Latest: v1.0.1</span>
+                <span>Latest: v1.0.2</span>
             </div>
         </div>
     </nav>
@@ -117,7 +117,97 @@
                 </p>
             </section>
 
-            <!-- Changelog Card -->
+            <!-- Changelog Card: v1.0.2 -->
+            <section class="max-w-2xl mx-auto">
+                <div class="changelog-card p-8 md:p-10 relative overflow-hidden group">
+                    <div class="absolute top-0 right-0 -mr-16 -mt-16 w-64 h-64 bg-white/5 rounded-full blur-3xl group-hover:bg-white/10 transition-colors duration-500"></div>
+                    
+                    <div class="relative z-10 flex flex-col md:flex-row md:items-end justify-between gap-4 mb-8 border-b border-white/10 pb-6">
+                        <div>
+                            <div class="flex items-center gap-3 mb-2">
+                                <h2 class="font-display text-4xl text-white font-bold">v1.0.2</h2>
+                                <span class="px-2 py-0.5 rounded text-[10px] font-mono font-bold bg-white/10 text-white/60 border border-white/10">LATEST</span>
+                            </div>
+                            <div class="font-mono text-xs text-gray-500">2026-5-14</div>
+                        </div>
+                        
+                        <div class="md:text-right max-w-xs">
+                            <p class="font-serif text-sm text-gray-400 italic leading-relaxed">
+                                "扣了一天，写了个反馈插件让大家一起扣。"
+                            </p>
+                        </div>
+                        
+                    </div>
+
+                    <div class="relative z-10">
+                        <ul class="space-y-4">
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-green-500/10 text-green-400 border border-green-500/20 group-hover/item:bg-green-500/20 transition-colors">ADD</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">plugins/feedback.py</span> 功能反馈插件，/feedback 提交建议，管理员能查看管理</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">config_models.py</span> reverse_ws 没配 default_factory，用户不写 [reverse_ws] 直接启动就炸</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">input_validator.py</span> validate_sql_input 的 allow_safe_keywords 逻辑顺序反了，SELECT 被当危险拦截</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">input_validator.py</span> sanitize_html 替 onclick 直接替换成 data- 而不是 data-click=，事件名丢了</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">thread_manager.py</span> get_client_executor 每次都 new threading.Lock()，线程安全约等于没有</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">performance.py</span> timeit 用 __qualname__ 记名字，测试里函数名长到匹配不上</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">furry.py</span> 复制粘贴残留，函数叫 handle_echo、注释写"东方Project"，绷不住了</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">plugins/__init__.py</span> VERIFIED_PLUGINS 里 furry_assistant 不存在，启动刷一片 ImportError</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">test_ws_pool.py / test_core_managers.py</span> 引用不存在的模块，pytest 收集阶段直接崩</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-red-500/10 text-red-400 border border-red-500/20 group-hover/item:bg-red-500/20 transition-colors">FIX</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors"><span class="font-mono text-xs text-gray-500">test_ws.py / test_redis_manager.py / test_env_loader.py / ...</span> 测试 mock 路径写错、异步标记缺失、环境变量污染，76 个测试全部挂逼</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-green-500/10 text-green-400 border border-green-500/20 group-hover/item:bg-green-500/20 transition-colors">ADD</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors">pytest-asyncio 配置，终于能跑异步测试了</span>
+                            </li>
+                            
+                            <li class="flex items-start gap-4 group/item">
+                                <span class="flex-shrink-0 mt-1 px-2 py-1 rounded text-[10px] font-mono font-bold bg-blue-500/10 text-blue-400 border border-blue-500/20 group-hover/item:bg-blue-500/20 transition-colors">UPD</span>
+                                <span class="text-base text-gray-300 leading-relaxed group-hover/item:text-white transition-colors">测试通过数 129 → 194，失败 76 → 2（剩下俩要 Redis 服务）</span>
+                            </li>
+                            
+                        </ul>
+                    </div>
+                </div>
+            </section>
+
+            <!-- Changelog Card: v1.0.1 -->
             <section class="max-w-2xl mx-auto">
                 <div class="changelog-card p-8 md:p-10 relative overflow-hidden group">
                     <!-- Decorative background glow -->