重构：核心迁移至 oss/core + NBPF 多重签名加密 + NIR 编译器 + README 全面升级

- 核心功能从 store/ 迁移至 oss/core/ 框架层
- 实现 NBPF 包格式：多重签名（Ed25519+RSA-PSS+HMAC）+ 多重加密（AES-256-GCM）
- 实现 NIR 编译器：基于 compile()+marshal 的跨平台中间表示
- 新增 nebula nbpf CLI 命令组（pack/unpack/verify/sign/keygen）
- 新增 19 个 NBPF 测试用例，覆盖全链路
- 彻底重写 README，大型项目标准框架风格，所有图表使用 SVG
- 更新 LICENSE 版权声明
- 清理旧版 store 插件目录（已迁移至 oss/core）

oss/core/http_api/router.py

@@ -0,0 +1,41 @@
+"""HTTP 路由 - 基于 oss/shared/router.py 的 BaseRouter"""
+import json
+from typing import Callable
+
+from oss.shared.router import BaseRouter, BaseRoute, match_path, extract_path_params
+from .server import Request, Response
+
+
+class HttpRouter(BaseRouter):
+    """HTTP 路由"""
+
+    def add(self, method: str, path: str, handler: Callable):
+        self.routes.append(BaseRoute(method, path, handler))
+
+    def handle(self, request: Request) -> Response:
+        """匹配路由并执行处理器"""
+        for route in self.routes:
+            if route.method == request.method and match_path(route.path, request.path):
+                params = extract_path_params(route.path, request.path)
+                try:
+                    result = route.handler(request, **params)
+                    if isinstance(result, Response):
+                        return result
+                    return Response(
+                        status=200,
+                        body=json.dumps(result) if not isinstance(result, str) else result,
+                        headers={"Content-Type": "application/json"}
+                    )
+                except Exception as e:
+                    return Response(
+                        status=500,
+                        body=json.dumps({"error": "Internal Server Error", "message": str(e)}),
+                        headers={"Content-Type": "application/json"}
+                    )
+
+        # 404 - 无匹配路由
+        return Response(
+            status=404,
+            body=json.dumps({"error": "Not Found", "message": f"路由未找到: {request.method} {request.path}"}),
+            headers={"Content-Type": "application/json"}
+        )