fix(security): restrict local connector endpoints

src/renderer/i18n/en.ts

@@ -191,7 +191,7 @@ export const en: Record<string, string> = {
   "onboarding.providers.apiKeyReplacePlaceholder": "Leave empty to keep the current key",
   "onboarding.providers.baseUrlLabel": "Base URL",
   "onboarding.providers.baseUrlRequired": "Enter the local server URL before saving.",
-  "onboarding.providers.baseUrlInvalid": "Enter a valid HTTP or HTTPS URL.",
+  "onboarding.providers.baseUrlInvalid": "Enter a loopback or private-network HTTP(S) URL.",
   "onboarding.providers.save": "Save",
   "onboarding.providers.saving": "Saving…",
   "onboarding.providers.saved": "Saved.",

src/renderer/i18n/zh.ts

@@ -191,7 +191,7 @@ export const zh: Record<string, string> = {
   "onboarding.providers.apiKeyReplacePlaceholder": "保持现有 Key 请留空",
   "onboarding.providers.baseUrlLabel": "服务地址",
   "onboarding.providers.baseUrlRequired": "请填入本地服务地址后再保存。",
-  "onboarding.providers.baseUrlInvalid": "请输入合法的 HTTP 或 HTTPS 地址。",
+  "onboarding.providers.baseUrlInvalid": "请输入本机或私有网络 HTTP(S) 地址。",
   "onboarding.providers.save": "保存",
   "onboarding.providers.saving": "保存中…",
   "onboarding.providers.saved": "已保存。",