feat(tls): cipher suite presets and a uTLS fingerprint warning

Adds PattN's semi-python and real-firefox client cipher lists as presets
in the cipher suites picker. A preset replaces the whole list because the
order is part of the ClientHello.

The inbound TLS form now warns when cipher suites are set under a uTLS
fingerprint other than "unsafe": clients ignore them there, while an
empty fingerprint is already pinned to unsafe in share links.

frontend/src/components/form/CipherSuitesSelect.tsx

@@ -1,10 +1,17 @@
 import { Select } from 'antd';
 import type { SelectProps } from 'antd';
+import { useTranslation } from 'react-i18next';
 
-import { TLS_CIPHER_OPTION } from '@/schemas/primitives';
+import { TLS_CIPHER_OPTION, TLS_CIPHER_PRESETS } from '@/schemas/primitives';
 
 const CIPHER_SUITE_OPTIONS = Object.values(TLS_CIPHER_OPTION).map((v) => ({ value: v, label: v }));
 
+const PRESET_PREFIX = 'preset:';
+const PRESET_OPTIONS = Object.keys(TLS_CIPHER_PRESETS).map((name) => ({
+  value: PRESET_PREFIX + name,
+  label: name,
+}));
+
 type CipherSuitesSelectProps = Omit<
   SelectProps<string[]>,
   'value' | 'onChange' | 'mode' | 'options'
@@ -14,6 +21,13 @@ type CipherSuitesSelectProps = Omit<
   onChange?: (value: string) => void;
 };
 
+function expandPreset(next: string[]): string[] {
+  const picked = [...next].reverse().find((v) => v.startsWith(PRESET_PREFIX));
+  if (!picked) return next;
+  const name = picked.slice(PRESET_PREFIX.length) as keyof typeof TLS_CIPHER_PRESETS;
+  return TLS_CIPHER_PRESETS[name].split(':');
+}
+
 // xray splits cipherSuites on ':' into a list, so the picker edits tags while
 // the stored value stays the single colon-joined string xray reads.
 export default function CipherSuitesSelect({
@@ -21,6 +35,7 @@ export default function CipherSuitesSelect({
   onChange,
   ...rest
 }: CipherSuitesSelectProps) {
+  const { t } = useTranslation();
   const suites = value
     .split(':')
     .map((s) => s.trim())
@@ -31,9 +46,12 @@ export default function CipherSuitesSelect({
       tokenSeparators={[':', ',']}
       {...rest}
       mode="tags"
-      options={CIPHER_SUITE_OPTIONS}
+      options={[
+        { label: t('pages.inbounds.form.presets'), options: PRESET_OPTIONS },
+        { label: t('pages.inbounds.form.cipherSuites'), options: CIPHER_SUITE_OPTIONS },
+      ]}
       value={suites}
-      onChange={(next) => onChange?.(next.join(':'))}
+      onChange={(next) => onChange?.(expandPreset(next).join(':'))}
     />
   );
 }