fix: portable 绿色单机版 SSH 连接 + 主机数据 + 打包体积

SSH 连接修复：
- main.cjs 顶部在所有 ssh2 require 之前安装 boringSslDhCompat 补丁
- 5 条 SSH 连接路径统一 legacyAlgorithms 默认值为 true

portable 版主机数据修复：
- main.cjs portable 模式设置 NETCATTY_PORTABLE=1
- preload.cjs 暴露 window.netcatty.isPortable
- useVaultState portable 模式跳过 safeStorage DPAPI 加密的 hosts_v1
- inspection saveVaultHosts handler 补 legacyAlgorithms/tags/os 字段映射

打包体积修复：
- 恢复 electron-builder.config.cjs 原始 40+ 条排除规则
- package.json 加 pend 运行时依赖

electron/bridges/sshBridge/startSession.cjs

@@ -362,7 +362,7 @@ function createStartSessionApi(ctx) {
           authMethod: options.authMethod || undefined,
           knownHosts: Array.isArray(options.knownHosts) ? options.knownHosts : undefined,
           verifyHostKeys: options.verifyHostKeys !== false,
-          legacyAlgorithms: !!options.legacyAlgorithms,
+          legacyAlgorithms: options.legacyAlgorithms !== false,
           skipEcdsaHostKey: !!options.skipEcdsaHostKey,
           algorithmOverrides: options.algorithmOverrides,
           useSshAgent: options.useSshAgent,
@@ -1470,7 +1470,11 @@ function createStartSessionApi(ctx) {
           keepaliveCountMax: keepalivePolicy.keepaliveCountMax,
           // Enable keyboard-interactive authentication (required for 2FA/MFA)
           tryKeyboard: true,
-          algorithms: buildAlgorithms(options.legacyAlgorithms, {
+          // Default legacyAlgorithms to true so older network devices (Huawei,
+          // H3C, Cisco, etc.) that only support legacy KEX algorithms like
+          // diffie-hellman-group1-sha1 can still connect. Modern devices still
+          // negotiate the strongest mutually supported algorithm first.
+          algorithms: buildAlgorithms(options.legacyAlgorithms !== false, {
             skipEcdsaHostKey: options.skipEcdsaHostKey,
             algorithmOverrides: options.algorithmOverrides,
           }),
@@ -1479,7 +1483,7 @@ function createStartSessionApi(ctx) {
         logSshAlgorithms("Target host", connectOpts.algorithms, {
           hostname: options.hostname,
           port: options.port || 22,
-          legacyAlgorithms: !!options.legacyAlgorithms,
+          legacyAlgorithms: options.legacyAlgorithms !== false,
           skipEcdsaHostKey: !!options.skipEcdsaHostKey,
           hasAlgorithmOverrides: !!options.algorithmOverrides,
         }, log);