feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

apps/website/app/pages/index.vue

@@ -1,15 +1,15 @@
-<template>
-  <div class="w-full">
-    <AppHeader />
-    <HeroBanner />
-    <TrustSection />
-    <StepProcess />
-    <PodProducts />
-    <FeatureCards />
-    <WhyInkReach />
-    <CompanyProfile />
-    <CustomerCases />
-    <CtaBanner />
-    <AppFooter />
-  </div>
-</template>
+<template>
+  <div class="w-full">
+    <AppHeader />
+    <HeroBanner />
+    <TrustSection />
+    <StepProcess />
+    <PodProducts />
+    <FeatureCards />
+    <WhyInkReach />
+    <CompanyProfile />
+    <CustomerCases />
+    <CtaBanner />
+    <AppFooter />
+  </div>
+</template>