feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

Public Mihomo templates ship rules, rule-providers and proxy-groups together
with a dns block those rules depend on (fake-ip ranges, nameserver policy).
Pasting a template inline keeps its dns, but pointing the global routing rules
at its URL dropped it, so URL users had to give up auto-refresh to keep it.

A new switch, subClashRemoteDNS (off by default), also takes the remote dns and
sniffer maps. It is opt-in because a remote dns block decides where clients send
every lookup. A malformed dns or sniffer value is skipped, not the whole template.
The component-test teardown now outlasts AntD Form's 10ms error debounce, which
otherwise fired after jsdom was gone.

frontend/public/openapi.json

@@ -242,6 +242,9 @@
           "subClashPath": {
             "type": "string"
           },
+          "subClashRemoteDNS": {
+            "type": "boolean"
+          },
           "subClashRules": {
             "type": "string"
           },
@@ -662,6 +665,7 @@
           "subClashEnable",
           "subClashEnableRouting",
           "subClashPath",
+          "subClashRemoteDNS",
           "subClashRules",
           "subClashURI",
           "subClashUserAgentRegex",
@@ -1018,6 +1022,9 @@
           "subClashPath": {
             "type": "string"
           },
+          "subClashRemoteDNS": {
+            "type": "boolean"
+          },
           "subClashRules": {
             "type": "string"
           },
@@ -1446,6 +1453,7 @@
           "subClashEnable",
           "subClashEnableRouting",
           "subClashPath",
+          "subClashRemoteDNS",
           "subClashRules",
           "subClashURI",
           "subClashUserAgentRegex",