feat(warp): register WARP over MASQUE from the WARP modal

xray-core's masque transport reaches Cloudflare WARP with an enrolled
ECDSA P-256 key, the endpoint's public key and the assigned tunnel
addresses, which only a WARP enrollment hands out.

A new regMasque action on /panel/api/xray/warp/:action registers a
separate WARP device and enrolls a secp256r1 key for the masque tunnel
(the API revision and client version the WARP apps enroll MASQUE keys
with). Enrolling replaces a device's WireGuard key, so it never touches
the stored WireGuard registration. It returns the PEM key pair, the
addresses and the endpoint, and the WARP modal turns them into a
warp-masque outbound (HTTP/3, Cloudflare's MASQUE SNI), or refreshes
the one already there.

docs/content/docs/en/config/masque.mdx

@@ -40,6 +40,11 @@ Pick **masque** as the outbound protocol, then set:
 
 ## WARP over MASQUE
 
+The quickest way is **Xray → Outbounds → WARP → Add WARP over MASQUE outbound**: the panel
+registers a separate WARP device, enrolls a MASQUE key for it and adds a ready `warp-masque`
+outbound (or refreshes the existing one). Your WireGuard WARP registration is not touched.
+To set it up by hand instead:
+
 Turn on **WARP** in the masque transport to reach Cloudflare WARP through its MASQUE
 endpoint instead of WireGuard. It takes a WARP registration enrolled for MASQUE:
 

docs/content/docs/fa/config/masque.mdx

@@ -40,6 +40,11 @@ icon: Waypoints
 
 ## WARP از طریق MASQUE
 
+ساده‌ترین راه **Xray ← Outbounds ← WARP ← افزودن outbound برای WARP روی MASQUE** است: پنل یک
+دستگاه WARP جداگانه ثبت می‌کند، برای آن کلید MASQUE ثبت می‌کند و یک outbound آمادهٔ `warp-masque`
+اضافه می‌کند (یا outbound موجود را تازه می‌کند). ثبت WARP وایرگارد شما دست نمی‌خورد.
+برای راه‌اندازی دستی:
+
 **WARP** را در transport مربوط به masque روشن کنید تا به‌جای WireGuard از طریق endpoint
 مخصوص MASQUE به Cloudflare WARP برسید. این کار به یک ثبت‌نام WARP نیاز دارد که برای MASQUE
 ثبت شده باشد:

docs/content/docs/ru/config/masque.mdx

@@ -40,6 +40,11 @@ icon: Waypoints
 
 ## WARP через MASQUE
 
+Проще всего: **Xray → Аутбаунды → WARP → Добавить аутбаунд WARP через MASQUE** — панель
+регистрирует отдельное устройство WARP, привязывает к нему ключ MASQUE и добавляет готовый
+аутбаунд `warp-masque` (или обновляет существующий). Регистрация WARP для WireGuard не меняется.
+Для ручной настройки:
+
 Включите **WARP** в транспорте masque, чтобы подключаться к Cloudflare WARP через его
 MASQUE-эндпоинт вместо WireGuard. Для этого нужна регистрация WARP, привязанная к MASQUE:
 

docs/content/docs/zh/config/masque.mdx

@@ -38,6 +38,10 @@ HTTPS 流量无异的完整三层隧道。xray-core 原生支持它；3x-ui 将
 
 ## 通过 MASQUE 使用 WARP
 
+最简单的方式是 **Xray → 出站 → WARP → 添加 WARP over MASQUE 出站**：面板会单独注册一个 WARP 设备、为其注册 MASQUE 密钥，
+并添加一个可直接使用的 `warp-masque` 出站（若已存在则更新）。你的 WireGuard WARP 注册不受影响。
+如需手动设置：
+
 在 masque 传输中开启 **WARP**，即可通过 Cloudflare 的 MASQUE 端点而非 WireGuard 连接 WARP。这需要一个已为
 MASQUE 注册的 WARP 账户：
 

docs/public/openapi.json

@@ -13649,7 +13649,7 @@
             "name": "action",
             "in": "path",
             "required": true,
-            "description": "data — return Warp stats. del — delete Warp data. config — return current config. reg — register (sends keys). changeIp — rotate the endpoint. license — set a Warp+ key. interval — set automatic rotation in hours.",
+            "description": "data — return Warp stats. del — delete Warp data. config — return current config. reg — register (sends keys). regMasque — register a separate device enrolled for MASQUE and return its warp key pair, addresses and endpoint. changeIp — rotate the endpoint. license — set a Warp+ key. interval — set automatic rotation in hours.",
             "schema": {
               "type": "string"
             }