fix(clients): reject dot names and recover legacy clients (#7062)

Reject reserved dot-segment client names and recover legacy records through query aliases. Preserve token scopes and path identity precedence, and update the generated API reference.

frontend/src/api/client-management.ts

@@ -0,0 +1,5 @@
+export function clientManagementPath(action: 'get' | 'update' | 'del', email: string): string {
+  const base = `/panel/api/clients/${action}`;
+  const encoded = encodeURIComponent(email);
+  return email === '.' || email === '..' ? `${base}?email=${encoded}` : `${base}/${encoded}`;
+}