feat(market-data): add native Tushare provider

[Sunshine168]

Summary

• add an opt-in native Tushare client with hot-read provider credentials, safe endpoint validation, retries, throttling, caching, and token redaction
• support A-share search, no-lookahead qfq daily bars, point-in-time financials, corporate status, calendars, industry membership, and index data
• expose typed traderhub china commands plus Settings UI configuration and capability probes
• document the source contract, units, adjustment semantics, and token rotation workflow

Verification

• npx tsc --noEmit --pretty false
• cd ui && npx tsc -b --pretty false
• focused Tushare/native routing/UI suite: 105 tests passed
• pnpm build: 15/15 tasks passed
• demo UI smoke: Tushare card, password input, endpoint and enable toggle rendered without console errors

Full-suite environment note

pnpm test completed with 5,301 passing tests and 160 failures unrelated to this change. The failures reproduce in the current local installed-app environment: Node 25 emits empty --localstorage-file state for UI workers, while inherited OPENALICE_* app paths point tests at /Applications/OpenAlice.app and cause integration timeouts. All focused affected suites pass.

[vercel]

Someone is attempting to deploy a commit to the luokerenx4's Team Team on Vercel.

A member of the Team first needs to authorize it.