新增了客户端打包成sdk的功能和服务端docker镜像打包的功能，并修复了一些问题

client/MainApp/main.cpp

@@ -10,6 +10,9 @@
 #include "../Common/ConfigHelper.h"
 #include "../Common/PolicyHelper.h"
 #include "../Common/LocalStateHelper.h"
+#include "../Common/TicketHelper.h"
+#include "../Common/IntegrityHelper.h"
+#include "../Common/DeviceIdentityHelper.h"
 
 int main(int argc, char* argv[])
 {
@@ -20,35 +23,40 @@ int main(int argc, char* argv[])
 
     qDebug() << Qt::endl << "entered main app" << Qt::endl;
 
-    const QString validToken = ConfigHelper::instance().getValue("App", "launch_token");
-    bool pass = false;
+    ConfigHelper& config = ConfigHelper::instance();
+    QString launcherExecutable = config.getValue("Runtime", "launcher_executable").trimmed();
+    if (launcherExecutable.isEmpty()) launcherExecutable = "Launcher.exe";
+    QString ticketFilePath;
     QString healthFilePath;
-
-    for (int i = 0; i < argc; ++i)
+    for (int i = 1; i < argc; ++i)
     {
-        QString arg(argv[i]);
-        if (arg.startsWith("--launcher-token="))
-        {
-            QString tk = arg.split("=").last();
-            if (tk == validToken)
-            {
-                pass = true;
-            }
-        }
+        const QString arg(argv[i]);
+        if (arg.startsWith("--ticket-file="))
+            ticketFilePath = arg.mid(QString("--ticket-file=").size());
         else if (arg.startsWith("--health-file="))
-        {
             healthFilePath = arg.mid(QString("--health-file=").size());
-        }
     }
 
-
-    if (!pass)
+    QString ticketError;
+    if (ticketFilePath.isEmpty()
+        || !TicketHelper::consumeAndVerify(ticketFilePath,
+            config.getValue("App", "app_id"), config.getValue("Update", "device_id"),
+            config.getValue("App", "current_version"), config.getValue("App", "launch_token"),
+            &ticketError))
     {
-        QMessageBox::critical(nullptr, "Startup Restriction", "Direct double-clicking MainApp.exe is prohibited. Please use Launcher.exe to open the software!");
+        QMessageBox::critical(nullptr, "Startup Restriction",
+            QString("Invalid or missing one-time launch ticket: %1\nPlease use %2.")
+                .arg(ticketError, launcherExecutable));
         return -1;
     }
 
     QString appDir = QApplication::applicationDirPath();
+    DeviceIdentityHelper identity(appDir);
+    if (!identity.verifyLocal(config.getValue("App", "app_id"), config.getValue("App", "channel")))
+    {
+        QMessageBox::critical(nullptr, "License Error", QString("Local license invalid: %1").arg(identity.errorString()));
+        return -1;
+    }
     PolicyHelper policy(appDir);
     if (!policy.loadPolicy("config/version_policy.dat") || !policy.isValid())
     {
@@ -81,6 +89,17 @@ int main(int argc, char* argv[])
         return -1;
     }
 
+    IntegrityHelper integrity(appDir);
+    if (!integrity.verifyInstalledVersion(
+            config.getValue("App", "app_id"), config.getValue("App", "channel"),
+            config.getValue("App", "current_version")))
+    {
+        QMessageBox::critical(nullptr, "Integrity Check Failed",
+            QString("Application files failed signed Manifest verification:\n%1")
+                .arg(integrity.errorString()));
+        return -1;
+    }
+
     MainWindow w;
     w.show();
 
@@ -107,4 +126,4 @@ int main(int argc, char* argv[])
 
     qDebug() << "Main program MainApp is running normally";
     return a.exec();
-}
+}