refactor: restructure plugins per MTSS standard, consolidate assets to res/

Per docs/plugin-audit-report.md (plugins normalized to
Trigger(handlers) → Service(services) → Model(repository/models) + utils):

- Split monolithic __init__.py into handlers/services/utils across
  dailywife, deer_pipe, dice, galgame_card, helldivers_tools,
  huoziyinshua, learning_chat, makeaquote, mc_server_status,
  ncm_saying, picfinder_take, picstatus, random_jm_code, regif,
  steam_info, video_analysis, group_tools
- Move static assets under res/: deer_pipe font/img, makeaquote font,
  helldivers img/templates, huoziyinshua HuoZiYinShua
- Add config.py + register_config_items to ncm_saying, random_jm_code,
  group_tools; learning_chat unified config bridge
- Remove deprecated: voice_trans plugin, bf_bot/test.py, dead code in
  dailywife/deer_pipe, empty dirs, debug scripts under helldivers temp
- Disable brash_general_supercredits_tools (stub comment only)
- bot.py: optional stdout/stderr redirect to log file for Web log viewer,
  force ANSI colorize on non-TTY sinks
- Move runtime data (jm_code.json) out of plugin dir into hexi/data
- Docs: plugin-audit-report.md; README reflects removed plugins

Co-Authored-By: Claude <noreply@anthropic.com>

hexi/plugins/nonebot_plugin_group_tools/handlers/management/antivirus.py

@@ -0,0 +1,25 @@
+"""群管理工具 —— 病毒消息拦截。"""
+
+from __future__ import annotations
+
+from nonebot import on_message, require
+from nonebot.adapters.onebot.v11 import Bot, GroupMessageEvent
+from nonebot.rule import is_type
+from nonebot_plugin_alconna import UniMessage
+
+require("nonebot_plugin_alconna")
+
+fuck_xxs = on_message(rule=is_type(GroupMessageEvent), block=False)
+
+
+@fuck_xxs.handle()
+async def fuck_xxs_handle(bot: Bot, ev: GroupMessageEvent):
+    for m in ev.message:
+        if m.type == "json" and '"app":"com.tencent.autoreply"' in m.data.get(
+            "data", ""
+        ):
+            await bot.delete_msg(message_id=ev.message_id)
+            await UniMessage.text(
+                "这是onse病毒码，会获取到你手机的xxs，然后发起攻击...以下省略6行需要全文背诵的金句"
+            ).send()
+            return