fix: remove committed oauth secrets, correct package typos, enable tests, rewrite readme

[houko]

Follow-up to #41, which was merged before these three commits landed. Covers the repository issues found while doing that upgrade, plus a Readme rewrite.

Committed OAuth secrets

core/src/main/resources/config/oauth.properties contains real third-party login credentials — app IDs and secrets for QQ, Sina Weibo, Baidu, Renren, OSChina and Douban. They have been sitting in this public repository since 2016. Nothing in the Java sources references the file or any of those keys, so it is dead config that has been leaking credentials for nine years.

This commit replaces every value with a placeholder and adds a note suggesting environment-variable injection.

This does not undo the exposure. The secrets remain in git history, the repository is public, and it has forks. Sanitizing the current file only stops future readers of the working tree. The only real remediation is revoking and reissuing each app secret at its provider. I did not rewrite git history — that is destructive, breaks every fork and clone, and is your call to make, not mine.

Package name typos

• info.xiaomo.anysc to info.xiaomo.async
• info.xiaomo.core.untils to info.xiaomo.core.utils

Both were misspelled since the original commit. Mechanical rename, references updated, build verified.

Tests were never running

The parent POM configured surefire with <skipTests>true</skipTests>, so no test in the project has ever executed. Now that there is a real build CI (added in #41), that switch is removed.

Removing it exposed the reason it was probably set: RabbitMqTests has no @SpringBootTest, so its @Autowired sender field is null and the test would NPE the moment it ran. Fixed properly rather than papered over:

• added @SpringBootTest(classes = RabbitMqMain.class)
• added @Disabled with an explicit reason — it needs a reachable RabbitMQ broker — instead of leaving a test that is guaranteed to fail
• moved from package test to info.xiaomo.rabbitmq to match the main source layout

Tests run: 1, Failures: 0, Errors: 0, Skipped: 1.

Readme rewrite

The Readme was missing the single thing a reader of this project most needs: what each of the 16 modules actually demonstrates. Added a module table covering the demonstrated technology, the entry-point class, and which external services each module requires.

Also corrected:

• tech stack and versions updated to what the project actually uses now, and the port difference (socket listens on 8081, everything else on 8080) is stated explicitly
• quick-start section gives copy-pasteable mvn and java commands — both were actually run and verified, including mvn spring-boot:run -pl order
• API documentation URLs point at springdoc's /swagger-ui.html and /v3/api-docs; the old knife4j /doc.html no longer exists after build: upgrade all dependencies to latest (Spring Boot 2.5 to 4.1) #41
• the Gitee mirror link used the retired git.oschina.net domain, updated to gitee.com (verified the mirror still resolves)
• the issue-feedback list was numbered 1, 2, 4
• the License section pasted the entire MIT text inline; it now links to LICENSE
• badges: the dead Travis badge was already replaced in build: upgrade all dependencies to latest (Spring Boot 2.5 to 4.1) #41; added CodeQL, Spring Boot and JDK badges
• the changelog was a flat 30-line list mixing 2017 and 2020 entries; the Readme now keeps only major milestones and links to changeLog.md, with the full record added there
• fixed a typo in changeLog.md: http://localhost:808/doc.html was missing a digit

Verification

mvn clean install passes on all 17 modules with tests enabled.

Not done

I deliberately left these alone rather than sweeping them into this PR:

• 26 printStackTrace calls and 32 System.out.println calls. These are stylistic issues in demo code; rewriting them would produce a large diff with no behavioural benefit and would bury the substantive changes above.
• .travis.yml is kept. travis-ci.org shut down in 2021 so the config is almost certainly dead, but it is not blocking anything and deleting it is your decision.