修复10个代码缺陷: panic防护, 死锁, 密钥泄漏, 错误吞没

- eval_random: randomInt参数max<=min时不再panic，返回CEL错误
- scanner: 长驻插件nil/panic时兜底发送ready通道，消除死锁
- poc_executor: Ceye API密钥改为环境变量CEYE_API/CEYE_DOMAIN
- Eval: ParseResponse加入oResp.Request nil检查
- Eval: reverseCheck中http.NewRequest错误不再忽略
- poc_executor: clusterpoc中CEL表达式求值错误记录日志
- winwmi: PowerShell执行失败完整记录错误信息
- sshkey: authorized_keys读取失败处理错误
- minidump: Scan结束后释放系统DLL句柄
- Windows插件: PE文件错误消息改用i18n

plugins/local/minidump.go

@@ -102,6 +102,7 @@ func (p *MiniDumpPlugin) Scan(ctx context.Context, info *common.HostInfo, sessio
 	if err := p.loadSystemDLLs(); err != nil {
 		return &plugins.Result{Success: false, Output: fmt.Sprintf("加载系统DLL失败: %v\n", err), Error: err}
 	}
+	defer p.releaseSystemDLLs()
 
 	pm := &ProcessManager{kernel32: p.kernel32, dbghelp: p.dbghelp, advapi32: p.advapi32}
 	avActive := p.isAVBlocking()
@@ -238,6 +239,15 @@ func (p *MiniDumpPlugin) loadSystemDLLs() error {
 	return nil
 }
 
+// releaseSystemDLLs 释放已加载的系统DLL
+func (p *MiniDumpPlugin) releaseSystemDLLs() {
+	for _, dll := range []*syscall.DLL{p.kernel32, p.dbghelp, p.advapi32} {
+		if dll != nil {
+			_ = dll.Release()
+		}
+	}
+}
+
 // isAdmin 检查是否具有管理员权限
 func (p *MiniDumpPlugin) isAdmin() bool {
 	var sid *windows.SID