fix(audit): Batch 2 生产代码 unwrap 替换 (20 处)

P0 修复:
- viking_commands.rs: URI 路径构建 unwrap → ok_or_else 错误传播
- clip.rs: 临时文件路径 unwrap → ok_or_else (防 Windows 中文路径 panic)

P1 修复:
- personality_detector.rs: Mutex lock unwrap → unwrap_or_else 防中毒传播
- pptx.rs: HashMap.get unwrap → expect (来自 keys() 迭代)

P2 修复:
- 4 处 SystemTime.unwrap → expect("system clock is valid")
- 4 处 dev_server URL.parse.unwrap → expect("hardcoded URL is valid")
- 9 处 nl_schedule Regex.unwrap → expect("static regex is valid")
- 5 处 data_masking Regex.unwrap → expect("static regex is valid")
- 2 处 pipeline/state Regex.unwrap → expect("static regex is valid")

全量测试通过: 719 passed, 0 failed

crates/zclaw-kernel/src/director.rs

@@ -360,7 +360,7 @@ impl Director {
                 use std::time::{SystemTime, UNIX_EPOCH};
                 let now = SystemTime::now()
                     .duration_since(UNIX_EPOCH)
-                    .unwrap()
+                    .expect("system clock is valid")
                     .as_nanos();
                 let idx = (now as usize) % agents.len();
                 Some(agents[idx].clone())

crates/zclaw-kernel/src/export/pptx.rs

@@ -490,7 +490,7 @@ impl PptxExporter {
             paths.sort();
 
             for path in paths {
-                let content = files.get(path).unwrap();
+                let content = files.get(path).expect("path comes from files.keys(), must exist");
                 let options = SimpleFileOptions::default()
                     .compression_method(zip::CompressionMethod::Deflated);
 

crates/zclaw-kernel/src/generation/chat.rs

@@ -243,7 +243,7 @@ fn clean_fallback_response(text: &str) -> String {
 fn current_timestamp_millis() -> i64 {
     std::time::SystemTime::now()
         .duration_since(std::time::UNIX_EPOCH)
-        .unwrap()
+        .expect("system clock is valid")
         .as_millis() as i64
 }
 

crates/zclaw-kernel/src/generation/mod.rs

@@ -882,7 +882,7 @@ fn current_timestamp() -> i64 {
     use std::time::{SystemTime, UNIX_EPOCH};
     SystemTime::now()
         .duration_since(UNIX_EPOCH)
-        .unwrap()
+        .expect("system clock is valid")
         .as_millis() as i64
 }