feat: OTA 附件改用 7z 压缩包（体积 -73%），客户端纯 Rust 解压

- 发布脚本：附件打包为 <binary>.7z（-mx=9）+ .7z.sha256 上传；
  同时保留裸二进制附件，v1.0.3 及更早客户端（不认识 7z）仍可升级
- update.rs：pick_assets 优先选 7z、无则回退裸二进制；
  下载 → 大小对账 + sha256 校验 → sevenz-rust 解压出二进制暂存
  （压缩包随即删除）；暂存目录清理排除 .7z
- UpdateInfo 增加 asset_name 字段区分压缩包/裸文件
- 实测 21.3MB exe → 5.8MB（7-Zip -mx=9）

scripts/publish-gitea.ps1

@@ -237,6 +237,41 @@ foreach ($f in $Files) {
     if ($name -match "^mqttx-v.*-mqttx(\.exe)?$") { $asset = $name }
     elseif ($name.EndsWith(".exe")) { $asset = "mqttx-v$VerNum-$Triple-mqttx.exe" }
     else { $asset = "mqttx-v$VerNum-$Triple-mqttx" }
+
+    # ── 7z 压缩附件（OTA 主通道：体积小、下载快）──
+    # 内部文件名 = $asset（应用解压后按此名暂存安装）
+    $SevenZip = @("$env:ProgramFiles\7-Zip\7z.exe", "${env:ProgramFiles(x86)}\7-Zip\7z.exe") |
+        Where-Object { Test-Path $_ } | Select-Object -First 1
+    if (-not $SevenZip) { $SevenZip = (Get-Command 7z -ErrorAction SilentlyContinue).Source }
+    if ($SevenZip) {
+        $packDir = Join-Path $env:TEMP ("mqttx-pack-" + [guid]::NewGuid().ToString("N"))
+        New-Item -ItemType Directory -Path $packDir | Out-Null
+        Copy-Item $f (Join-Path $packDir $asset)
+        $archive = Join-Path $env:TEMP "$asset.7z"
+        & $SevenZip a -y -mx=9 $archive (Join-Path $packDir $asset) | Out-Null
+        if ($LASTEXITCODE -eq 0 -and (Test-Path $archive)) {
+            $asum = (Get-FileHash -Algorithm SHA256 $archive).Hash.ToLower()
+            "$asum  $asset.7z" | Set-Content -NoNewline -Encoding ascii "$archive.sha256"
+            foreach ($a in @("$asset.7z", "$asset.7z.sha256")) {
+                $code = Upload-ReleaseAsset "$Api/releases/$releaseId/assets?name=$a" (Join-Path $env:TEMP $a)
+                if ($code -eq 201) {
+                    Write-Host "  ✓ Release 附件 $a" -ForegroundColor Green
+                }
+                else {
+                    Write-Host "  ! Release 附件 $a 上传失败 (HTTP $code)" -ForegroundColor Yellow
+                }
+            }
+        }
+        else {
+            Write-Host "  ! 7z 打包失败（exit=$LASTEXITCODE），跳过压缩附件" -ForegroundColor Yellow
+        }
+        Remove-Item $packDir, $archive, "$archive.sha256" -Recurse -Force -ErrorAction SilentlyContinue
+    }
+    else {
+        Write-Host "  ! 未找到 7-Zip，跳过 7z 附件（仅上传裸二进制）" -ForegroundColor Yellow
+    }
+
+    # ── 裸二进制附件：v1.0.3 及更早客户端不认识 7z，需要它升级 ──
     $tmp = Join-Path $env:TEMP $asset
     Copy-Item $f $tmp -Force
     $sum = (Get-FileHash -Algorithm SHA256 $f).Hash.ToLower()

scripts/publish-gitea.sh

@@ -193,6 +193,37 @@ for f in "${FILES[@]}"; do
     *.exe) asset="mqttx-v${VER_NUM}-${TRIPLE}-mqttx.exe" ;;
     *)     asset="mqttx-v${VER_NUM}-${TRIPLE}-mqttx" ;;
   esac
+
+  # ── 7z 压缩附件（OTA 主通道）：内部文件名 = $asset（应用解压后按此名安装）──
+  SEVENZIP="$(command -v 7z 7za 2>/dev/null | head -1)"
+  [ -z "$SEVENZIP" ] && [ -x "/c/Program Files/7-Zip/7z.exe" ] && SEVENZIP="/c/Program Files/7-Zip/7z.exe"
+  if [ -n "$SEVENZIP" ]; then
+    "$SEVENZIP" a -y -mx=9 "$STAGE/$asset.7z" "$f" >/dev/null
+    # 归档内的文件名需为 $asset：7z 存的是源文件名，先复制改名再压
+    rm -f "$STAGE/$asset.7z"
+    cp -f "$f" "$STAGE/$asset"
+    "$SEVENZIP" a -y -mx=9 "$STAGE/$asset.7z" "$STAGE/$asset" >/dev/null
+    if [ -f "$STAGE/$asset.7z" ]; then
+      printf '%s  %s\n' "$(sha256 "$STAGE/$asset.7z")" "$asset.7z" > "$STAGE/$asset.7z.sha256"
+      for a in "$asset.7z" "$asset.7z.sha256"; do
+        code="$(curl -sS -o "$STAGE/up.json" -w '%{http_code}' \
+          -X POST \
+          -H "Authorization: token ${GITEA_TOKEN}" \
+          -F "attachment=@${STAGE}/${a}" \
+          "${API}/releases/${RELEASE_ID}/assets?name=${a}")"
+        case "$code" in
+          201) echo "  ✓ Release 附件 $a" ;;
+          *)   echo "  ! Release 附件 $a 上传失败 (HTTP $code)" >&2; cat "$STAGE/up.json" >&2 || true ;;
+        esac
+      done
+    else
+      echo "  ! 7z 打包失败，跳过压缩附件" >&2
+    fi
+  else
+    echo "  ! 未找到 7z/7za，跳过 7z 附件（仅上传裸二进制）" >&2
+  fi
+
+  # ── 裸二进制附件：v1.0.3 及更早客户端不认识 7z，需要它升级 ──
   cp -f "$f" "$STAGE/$asset"
   printf '%s  %s\n' "$(sha256 "$f")" "$asset" > "$STAGE/$asset.sha256"
   for a in "$asset" "$asset.sha256"; do