feat: 初始化 Go2 导航代码与配置

unitree_ui/unitree_ui-main/docs/account.md

@@ -0,0 +1,32 @@
+# Account Manager
+
+Talks to Unitree's cloud API directly — no phone app required. Sign in with your Unitree credentials (or paste an access token), and the same surface area the mobile app uses opens up: device list, firmware images, tutorials, sharing, raw API console.
+
+<p align="center">
+  <img src="../images/hub.png" width="80%" />
+</p>
+
+## Sign-in
+
+Two paths:
+
+- **Email + password** — standard login, session is persisted in `localStorage` and refreshed automatically.
+- **Access token** — paste an existing `accessToken`; useful if you've fetched one with the `unitree-fetch-aes-key` CLI from [unitree_webrtc_connect](https://github.com/legion1581/unitree_webrtc_connect) or extracted it from the phone app.
+
+The **family slot** on the landing page determines which `AppName` header signs cloud requests — `Go2` accounts hit `global-robot-api.unitree.com` with `AppName: Go2`; G1 accounts use `AppName: B2`. Pick the one your account is registered under.
+
+## Tabs
+
+### Devices
+Robots bound to your account: online status, alias, SN, model, firmware version. Per-device actions: bind/unbind, share, fetch firmware images, view detail. Logging in here also primes the AES-128 key cache for any V3-capable device (G1 ≥ 1.5.1, Go2 ≥ 1.1.15) by pulling `dev.key` from `device/bind/list`.
+
+The device detail screen also exposes a **Refresh AES Key** panel (between Firmware Updates and Danger Zone). Paste the 344-char base64 blob from the BT page (`344B RSA` row) and the cloud will RSA-decrypt it via `device/bindExtData`, persist the derived 16-byte key as `dev.key`, and seed the local cache — useful when a device was bound before its firmware moved to V3, or after a key rotation. Family-agnostic: the call's `AppName` header is pinned to the device's series, so refreshing a G1 key while logged in as Go2 family (or vice versa) works.
+
+### Info
+App version with APK download links, grouped video tutorials (queried as `tutorial/list?appName=<family>&type=<model>`), changelog, and announcements.
+
+### Account
+Profile, avatar, password change, region, session management.
+
+### Debug
+Raw API console — 77 endpoints across 13 categories (Auth, Devices, Firmware, WebRTC, Wallet, etc.). Lets you fire any cloud request with custom params and inspect the JSON response. Useful for protocol reverse-engineering or one-off operations that don't have a dedicated UI yet.