feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

.agents/skills/impeccable/scripts/live-status.mjs

@@ -1,61 +0,0 @@
-#!/usr/bin/env node
-/**
- * Print durable recovery status for Impeccable live sessions.
- */
-
-import { createLiveSessionStore } from './live-session-store.mjs';
-import { readLiveServerInfo } from './impeccable-paths.mjs';
-import { manualApplyResumeHint } from './live-resume.mjs';
-
-function readServerInfo() {
-  return readLiveServerInfo(process.cwd())?.info || null;
-}
-
-async function fetchServerStatus(info) {
-  if (!info) return null;
-  try {
-    const res = await fetch(`http://localhost:${info.port}/status?token=${info.token}`);
-    if (!res.ok) return null;
-    return await res.json();
-  } catch {
-    return null;
-  }
-}
-
-export async function statusCli() {
-  const info = readServerInfo();
-  const server = await fetchServerStatus(info);
-  const store = createLiveSessionStore({ cwd: process.cwd() });
-  const activeSessions = store.listActiveSessions();
-  const manualApply = findPendingManualApply(server, activeSessions);
-  const payload = {
-    liveServer: server ? {
-      status: server.status,
-      port: server.port,
-      connectedClients: server.connectedClients,
-      agentPolling: server.agentPolling,
-      pendingEvents: server.pendingEvents,
-    } : null,
-    activeSessions: server?.activeSessions || activeSessions,
-    recoveryHint: manualApply
-      ? manualApplyResumeHint(manualApply)
-      : server
-        ? 'Run live-poll.mjs to continue pending work, or live-complete.mjs --id <session> after manual cleanup.'
-        : 'Start live-server.mjs to requeue pending durable events, then run live-poll.mjs.',
-  };
-  console.log(JSON.stringify(payload, null, 2));
-}
-
-function findPendingManualApply(server, activeSessions) {
-  const fromServer = server?.pendingEvents?.find((event) => event?.type === 'manual_edit_apply');
-  if (fromServer) return fromServer;
-  const fromSession = activeSessions
-    ?.map((session) => session.pendingEvent)
-    .find((event) => event?.type === 'manual_edit_apply');
-  return fromSession || null;
-}
-
-const _running = process.argv[1];
-if (_running?.endsWith('live-status.mjs') || _running?.endsWith('live-status.mjs/')) {
-  statusCli();
-}