feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

apps/website/server/utils/pod-api.ts

@@ -1,7 +1,7 @@
-export const POD_API_BASE = 'https://mapi.sdspod.com';
-
-export const POD_HEADERS = {
-  'Content-Type': 'application/json;charset=UTF-8',
-  'Origin': 'https://inkpod.vip',
-  'Referer': 'https://inkpod.vip/',
-};
+export const POD_API_BASE = 'https://mapi.sdspod.com';
+
+export const POD_HEADERS = {
+  'Content-Type': 'application/json;charset=UTF-8',
+  'Origin': 'https://inkpod.vip',
+  'Referer': 'https://inkpod.vip/',
+};