## Why

Chinese domains and IP addresses should connect directly without going through the proxy chain. Routing China-destined traffic through overseas proxies adds unnecessary latency and may break access to domestic services.

## What Changes

- Add Sukka's China domain and IP rulesets to the reference Surge client configuration, routing them to `DIRECT`
- China domain rules placed before IP-based rules (following Sukka's prescribed ordering)
- China IP CIDR rules placed in the IP rules section

## Capabilities

### New Capabilities

(none)

### Modified Capabilities
- `proxy-rules`: Adding China domain and IP direct bypass rules to the Surge configuration

## Impact

- `docs/surge-client.conf` updated with new DIRECT rules for China traffic
- No server-side changes — this is client-side Surge configuration only