Disable proxy pool by default; add managed proxy lifecycle and Turnstile fixes.

Keep proxy_pool_enabled/managed off for direct registration, while shipping
SSO OAuth CPA export, visible Turnstile click handling, and proxy harvest tooling.

config.json

@@ -8,6 +8,24 @@
     "cloudflare_path_token": "/api/token",
     "cloudflare_path_messages": "/api/mails",
     "proxy": "",
+    "proxy_pool_enabled": false,
+    "proxy_managed": false,
+    "proxy_db": "./proxy_alive.json",
+    "proxy_pool": [],
+    "proxy_pool_file": "./proxies.txt",
+    "proxy_pool_mode": "weighted",
+    "proxy_rotate_each_account": true,
+    "proxy_mail_direct": true,
+    "proxy_source_pick_k": 3,
+    "proxy_harvest_per_source": 150,
+    "proxy_harvest_total": 400,
+    "proxy_probe_workers": 40,
+    "proxy_probe_timeout": 12,
+    "proxy_max_alive": 200,
+    "proxy_min_alive": 15,
+    "proxy_harvest_interval_sec": 600,
+    "proxy_check_interval_sec": 300,
+    "proxy_source_disable_after": 3,
     "enable_nsfw": true,
     "register_count": 99999,
     "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36",
@@ -35,6 +53,6 @@
     "gmail_worker_timeout_sec": 20,
     "gmail_worker_poll_interval": 0.4,
     "gmail_imap_fallback": false,
-    "hide_window": true,
-    "block_media_fonts": true
+    "hide_window": false,
+    "block_media_fonts": false
 }