Add Baidu Cloud CDN deploy hook

[tnqzh123]

This Pull Request adds a deploy hook for Baidu Cloud CDN.

Code generated by GitHub Copilot with Claude Sonnet 4.6. Tested with local environment by human.

Usage

Declare these env first:

# These two credentials are shared with Baidu Cloud dns api (dnsapi/dns_baidu.sh)
export Baidu_AK="your-access-key-id"
export Baidu_SK="your-secret-access-key"
# To deploy a certificate to a different domain (commonly used with wildcard certificates)
export DEPLOY_BAIDU_CDN_DOMAIN="cdn.example.com"
# To deploy a certificate to multiple domains
export DEPLOY_BAIDU_CDN_DOMAIN="cdn1.example.com cdn2.example.com"

Both main account AccessKey and sub account AccessKey are fine. However, if you use a sub account AccessKey, make sure the sub account has CDNFullControlAccessPolicy permission policy.

Then call the deploy command with baidu_cdn deploy hook specified:

acme.sh --deploy -d cdn.example.com --deploy-hook baidu_cdn

Reference

• Alibaba Cloud CDN deploy hook
• Baidu Cloud CDN Certificates Batch Upload API Doc (Chinese)

[neilpang]

Don't source dnsapi/dns_baidu.sh and call its private _baidu_* helpers. Those are plugin internals with no stability guarantee — dns_baidu is being rewritten right now in #6992, and any rename there silently breaks this hook. Make the hook self-contained (inline the credential loading and the few helpers you need).

Also: CI hasn't run on this branch — rebase onto current dev; and add the usage entry to the deployhooks wiki.