feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

apps/api/src/origin-goods/origin-goods.controller.ts

@@ -1,27 +1,27 @@
-import { Controller, Get, Query, UseGuards } from '@nestjs/common';
-import { ApiBearerAuth, ApiOperation, ApiTags } from '@nestjs/swagger';
-import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
-import { OriginGoodsService } from './origin-goods.service';
-import { QueryOriginGoodDto } from './dto/query-origin-good.dto';
-
-@ApiTags('origin-goods')
-@ApiBearerAuth()
-@UseGuards(JwtAuthGuard)
-@Controller('origin-goods')
-export class OriginGoodsController {
-  constructor(private readonly service: OriginGoodsService) {}
-
-  @Get('tree')
-  @ApiOperation({
-    summary: 'Origin goods grouped by SDS category with config status',
-  })
-  getTree() {
-    return this.service.getTree();
-  }
-
-  @Get()
-  @ApiOperation({ summary: 'Paginated list of origin goods (read-only)' })
-  findAll(@Query() query: QueryOriginGoodDto) {
-    return this.service.findAll(query);
-  }
-}
+import { Controller, Get, Query, UseGuards } from '@nestjs/common';
+import { ApiBearerAuth, ApiOperation, ApiTags } from '@nestjs/swagger';
+import { JwtAuthGuard } from '../auth/guards/jwt-auth.guard';
+import { OriginGoodsService } from './origin-goods.service';
+import { QueryOriginGoodDto } from './dto/query-origin-good.dto';
+
+@ApiTags('origin-goods')
+@ApiBearerAuth()
+@UseGuards(JwtAuthGuard)
+@Controller('origin-goods')
+export class OriginGoodsController {
+  constructor(private readonly service: OriginGoodsService) {}
+
+  @Get('tree')
+  @ApiOperation({
+    summary: 'Origin goods grouped by SDS category with config status',
+  })
+  getTree() {
+    return this.service.getTree();
+  }
+
+  @Get()
+  @ApiOperation({ summary: 'Paginated list of origin goods (read-only)' })
+  findAll(@Query() query: QueryOriginGoodDto) {
+    return this.service.findAll(query);
+  }
+}