fix(ths): rewrite hot-rank to use upstream API for full 100 ranks

[qian0817]

Summary

Fixes #2140.

Rewrites the ths/hot-rank adapter to fetch data from the public hot_list JSON API instead of scraping the Swiper-lazy-loaded DOM. This makes --limit 100 return the full 100 entries with an authoritative 1..100 rank.

Background / Root Cause

The page renders the ranking inside a Swiper carousel that lazy-loads 20 ranks per slide. DOM scraping only ever sees the first ~20 names, so:

• --limit 100 returned only ~68 entries.
• Ranks past the first slide were wrong: the rank text printed on each card is a per-slide 1..20 that recycles across slides, so idx+1 / rank++ logic cannot reconstruct the real 1..100 order.

The data source itself is a public, unauthenticated JSON API that returns all 100 entries in one call with an authoritative order rank.

Changes

• clis/ths/hot-rank.js — pure HTTP call to the upstream API:

  GET https://dq.10jqka.com.cn/fuyao/hot_list_data/out/hot_list/v1/stock?stock_type=a&type=hour&list_type=normal
  

  • strategy: PUBLIC, browser: false (same pattern as toutiao/hot).
  • Field mapping: order→rank, code→symbol, rise_and_fall→changePercent, rate→heat (formatted as x.x万热度), tag.{popularity_tag, concept_tag}→tags.
  • limit clamped to [1, 100].
  • Errors: CommandExecutionError on HTTP / malformed-JSON / non-zero status_code; EmptyResultError on an empty stock_list.
  • Fix the non-browser func signature to (kwargs, debug). The previous (page, kwargs) signature silently swallowed --limit for browser: false commands.
  • Add a symbol column, aligning with eastmoney/hot-rank / tdx/hot-rank.
• clis/ths/hot-rank.test.js — mock global fetch; cover limit=100 dense 1..100 ranks, non-sorted upstream order, clamping, and all error paths. 9 tests pass.
• cli-manifest.json — rebuilt (new strategy / browser / columns).

Verification

$ opencli ths hot-rank --limit 100 -f json
# count: 100, rank = 1..100 dense, all fields 100% populated

Edge cases tested: limit=1, default 20, limit=200 (clamped to 100), table/plain/json formats.

Notes

• package-lock.json changes from npm install were intentionally excluded from this PR.