feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

apps/website/server/api/backend/goods/[id].get.ts

@@ -1,13 +1,13 @@
-export default defineEventHandler((event) => {
-  const config = useRuntimeConfig();
-  const id = getRouterParam(event, 'id');
-
-  if (!id) {
-    throw createError({
-      statusCode: 400,
-      message: 'Good ID is required',
-    });
-  }
-
-  return $fetch(`${config.public.backendUrl}/public/goods/${id}`);
-});
+export default defineEventHandler((event) => {
+  const config = useRuntimeConfig();
+  const id = getRouterParam(event, 'id');
+
+  if (!id) {
+    throw createError({
+      statusCode: 400,
+      message: 'Good ID is required',
+    });
+  }
+
+  return $fetch(`${config.public.backendUrl}/public/goods/${id}`);
+});