[Support Request] Routing not work

### Checks

- [x] I have searched the existing issues
- [x] I have read the documentation
- [x] Is it your first time sumbitting an issue

### Support Request

What ever I set in the routing, it just won't work and everything goes to fallback

### Current Behavior
```
[Mar 10 17:57:18] WARN handlePkt: failed to GetOrCreate: failed to select dialer from group proxy (udp4, dns?:false,from: 10.181.83.230:45351): no alive dialer
[Mar 10 17:57:18] WARN handlePkt: failed to GetOrCreate: failed to select dialer from group proxy (udp4, dns?:false,from: 10.181.83.230:53957): no alive dialer
[Mar 10 17:57:18] WARN handlePkt: failed to GetOrCreate: failed to select dialer from group proxy (udp4, dns?:false,from: 10.181.83.230:56098): no alive dialer
[Mar 10 17:57:19] INFO 10.181.83.230:52480 <-> alive.github.com:443 dialer=to.FlyintPro.om dscp=0 ip=140.82.112.25:443 mac=18:56:80:a6:de:43 network=tcp4 outbound=proxy pid=0 pname=firefox policy=min_moving_avg sniffed=alive.github.com
```
### Expected Behavior

github using direct outbound

### Steps to Reproduce

1. Start up dae
2. Visit github.com

### Environment

- **Dae version (use `dae --version`)**: unknown
- **OS (e.g `cat /etc/os-release`)**: Archlinux
- **Kernel (e.g. `uname -a`)**: 6.13.5

### Anything else?

my group config

```
group {
proxy {
filter: !name(keyword:'Hongkong', keyword:'Taiwan')
policy: min_moving_avg
}
hk {
filter: name(keyword:'香港', keyword:'HK', keyword:'Hongkong')
policy: min_moving_avg
}
tw {
filter: name(keyword:'台湾', keyword:'TW', keyword:'Taiwan')
policy: min_moving_avg
}
us {
filter: name(keyword:'美国', keyword:'US', keyword:'USA')
policy: min_moving_avg
}
}
```
my routing config

```
routing {
### Preset rules.

# Network managers in localhost should be direct to avoid false negative network connectivity check when binding to
# WAN.
pname(NetworkManager) -> direct

# Put it in the front to prevent broadcast, multicast and other packets that should be sent to the LAN from being
# forwarded by the proxy.
# "dip" means destination IP.
dip(224.0.0.0/3, 'ff00::/8') -> direct

# This line allows you to access private addresses directly instead of via your proxy. If you really want to access
# private addresses in your proxy host network, modify the below line.
dip(geoip:private) -> direct

### Write your rules below.
domain(suffix: github.com) -> direct
# Processes
pname(dnscrypt-proxy, qq, wechat, ssh, scp, dnsmasq, clash) -> must_direct

# ai-chat
domain(geosite:category-ai-chat-!cn,
suffix: copilot.microsoft.com,
suffix: gateway-copilot.bingviz.microsoftapp.net,
suffix: mobile.events.data.microsoft.com,
suffix: graph.microsoft.com,
suffix: analytics.adjust.com,
suffix: analytics.adjust.net.in,
suffix: api.revenuecat.com,
suffix: t-msedge.net,
suffix: cloudapp.azure.com,
suffix: browser-intake-datadoghq.com,
suffix: in.appcenter.ms,
suffix: guzzoni.apple.com,
suffix: smoot.apple.com,
suffix: apple-relay.cloudflare.com,
suffix: apple-relay.fastly-edge.com,
suffix: cp4.cloudflare.com,
suffix: apple-relay.apple.com,
suffix: aistudio.google.com,
suffix: ai.google.dev,
suffix: chatbot-arena.web.app,
suffix: lmarena.ai,
suffix: x.com) -> us

domain(geosite:category-cryptocurrency,
suffix:polymarket.com,
suffix:debank.com,
suffix:amplitude.com) -> must_hk

domain(geosite:category-scholar-cn) -> direct
#dip(geoip:cn) -> direct
#domain(geosite:cn) -> direct

fallback: proxy
}
```

Start by reproducing the reported routing configuration on Arch Linux and visiting github.com through dae. Compare the github.com rule with the logged fallback and proxy dialer selection. Done means github.com uses the direct outbound rather than fallback, with the relevant cause documented or confirmed by maintainers.

Written by the indexing model from the issue text.