feat: enhance DoH profile management and resolver policy in modules

- Added `DohResolverPolicy` schema to OpenAPI documentation, defining policies for domain resolution.
- Updated module handling to support multiple DoH profiles via `doh_profile_ids` and introduced `doh_resolver_policy` in the API.
- Refactored related functions to accommodate the new DoH profile structure, ensuring backward compatibility with existing `doh_profile_id`.
- Enhanced UI components to allow selection and management of DoH profiles and policies in the web interface.
- Updated database interactions to handle new fields and ensure proper data normalization.

internal/store/memory_crud.go

@@ -31,9 +31,11 @@ func (m *Memory) CreateModule(tenantID string, in *Module) (*Module, error) {
 		RefreshIntervalSec: in.RefreshIntervalSec,
 		CronExpr:           in.CronExpr,
 		DefaultCommunityID: in.DefaultCommunityID,
-		DohProfileID:       in.DohProfileID,
+		DohProfileIDs:      append([]string(nil), in.DohProfileIDs...),
+		DohResolverPolicy:  in.DohResolverPolicy,
 		LastRefreshedAt:    in.LastRefreshedAt,
 	}
+	NormalizeModuleDoh(mod)
 	m.modules[id] = mod
 	return mod, nil
 }
@@ -71,14 +73,7 @@ func (m *Memory) UpdateModule(tenantID, moduleID string, patch *ModulePatch) (*M
 			mod.DefaultCommunityID = &v
 		}
 	}
-	if patch.DohProfileID != nil {
-		v := strings.TrimSpace(*patch.DohProfileID)
-		if v == "" {
-			mod.DohProfileID = nil
-		} else {
-			mod.DohProfileID = &v
-		}
-	}
+	ApplyModuleDohPatch(mod, patch)
 	if patch.LastRefreshedAt != nil {
 		t := patch.LastRefreshedAt.UTC()
 		mod.LastRefreshedAt = &t
@@ -555,8 +550,13 @@ func (m *Memory) DeleteDohProfile(tenantID, id string) error {
 		return ErrNotFound
 	}
 	for _, mod := range m.modules {
-		if mod.DohProfileID != nil && *mod.DohProfileID == id {
-			return ErrInvalidInput
+		if mod == nil || mod.DeletedAt != nil {
+			continue
+		}
+		for _, pid := range mod.EffectiveDohProfileIDs() {
+			if pid == id {
+				return ErrInvalidInput
+			}
 		}
 	}
 	delete(m.dohProfiles, id)