feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

.agents/skills/prisma-postgres/references/management-api-sdk.md

@@ -1,56 +0,0 @@
-# management-api-sdk
-
-Use `@prisma/management-api-sdk` for typed API integration with optional OAuth and token refresh.
-
-## Priority
-
-HIGH
-
-## Why It Matters
-
-The SDK provides typed endpoint methods and removes boilerplate around auth and refresh handling, which reduces errors in production provisioning flows.
-
-## Install
-
-```bash
-npm install @prisma/management-api-sdk
-```
-
-## Simple client (existing token)
-
-```typescript
-import { createManagementApiClient } from '@prisma/management-api-sdk'
-
-const client = createManagementApiClient({ token: process.env.PRISMA_SERVICE_TOKEN! })
-const { data: workspaces } = await client.GET('/v1/workspaces')
-```
-
-## Full SDK (OAuth + refresh)
-
-```typescript
-import { createManagementApiSdk, type TokenStorage } from '@prisma/management-api-sdk'
-
-const tokenStorage: TokenStorage = {
-  async getTokens() { return null },
-  async setTokens(tokens) {},
-  async clearTokens() {},
-}
-
-const api = createManagementApiSdk({
-  clientId: process.env.PRISMA_CLIENT_ID!,
-  redirectUri: 'https://your-app.com/auth/callback',
-  tokenStorage,
-})
-```
-
-## OAuth SDK flow
-
-1. Call `getLoginUrl()` and persist `state` + `verifier`.
-2. Redirect user to login URL.
-3. Handle callback with `handleCallback()`.
-4. Use `api.client` for typed endpoint calls.
-5. Call `logout()` when needed.
-
-## References
-
-- [Management API SDK docs](https://www.prisma.io/docs/postgres/introduction/management-api-sdk)