Add VPN admin tab with subscription proxy via cp-vpn for selected sources.

Persist settings in CA, expose /admin/vpn and /internal/vpn, and route Telegram (and optional web/nlp) traffic through mihomo SOCKS when enabled.

Co-authored-by: Cursor <cursoragent@cursor.com>

centers/parsing/workers/worker.py

@@ -179,10 +179,31 @@ async def run_with_listener() -> None:
         await worker_loop(ctx=WorkerContext())
         return
 
+    from workers.sources.telegram_client import TelegramAuthError, TelegramConfigError
     from workers.sources.telegram_listener import TelegramListener
     from workers.sources.telegram_session import close_shared_client, get_shared_client
 
-    client = await get_shared_client()
+    while True:
+        try:
+            client = await get_shared_client()
+            break
+        except (TelegramAuthError, TelegramConfigError, ConnectionError, OSError) as exc:
+            logger.error(
+                "Telegram connect failed (%s); retry in 60s (batch without TG)",
+                exc,
+            )
+            try:
+                await asyncio.wait_for(
+                    worker_loop(ctx=WorkerContext(tg_client=None)),
+                    timeout=60,
+                )
+            except asyncio.TimeoutError:
+                pass
+            continue
+        except Exception:
+            logger.exception("Unexpected Telegram connect error; retry in 60s")
+            await asyncio.sleep(60)
+
     listener = TelegramListener(client)
     ctx = WorkerContext(tg_client=client)
     worker_task = asyncio.create_task(worker_loop(ctx=ctx))