feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

apps/api/src/common/decorators/current-user.decorator.ts

@@ -1,13 +1,13 @@
-import { createParamDecorator, ExecutionContext } from '@nestjs/common';
-
-/**
- * Pulls the authenticated user out of the request, as populated by
- * the JWT strategy.
- */
-export const CurrentUser = createParamDecorator(
-  (data: keyof { id: bigint; username: string } | undefined, ctx: ExecutionContext) => {
-    const request = ctx.switchToHttp().getRequest<{ user?: { id: bigint; username: string } }>();
-    const user = request.user;
-    return data ? user?.[data] : user;
-  },
-);
+import { createParamDecorator, ExecutionContext } from '@nestjs/common';
+
+/**
+ * Pulls the authenticated user out of the request, as populated by
+ * the JWT strategy.
+ */
+export const CurrentUser = createParamDecorator(
+  (data: keyof { id: bigint; username: string } | undefined, ctx: ExecutionContext) => {
+    const request = ctx.switchToHttp().getRequest<{ user?: { id: bigint; username: string } }>();
+    const user = request.user;
+    return data ? user?.[data] : user;
+  },
+);