feat(deploy): production deployment setup and fixes

- Debian-based api image (bookworm-slim), docker/debian mirrors, prisma
  binaryTargets for openssl 3.0
- nginx: admin SPA under /admin, TLS via acme.sh (ZeroSSL) + auto-renewal
  cron, http->https redirect
- prisma: add origin_goods.delisted migration, sync missing schema
  (good_image/tag_font_color/good_tags), fix users.createdAt Timestamptz
- api: CORS wildcard reflection, helmet CORP cross-origin, price
  backfill in persistProductDetail, categoryIcon ancestor fallback,
  mediaByColor per-color gallery in public goods detail
- admin: /admin base path (vite + router)
- import-data.mjs: udt_name casting, serial sequence advance fix

package.json

@@ -1,36 +1,36 @@
-{
-  "name": "inkreach-official",
-  "private": true,
-  "scripts": {
+{
+  "name": "inkreach-official",
+  "private": true,
+  "scripts": {
     "dev": "turbo run dev",
     "dev:admin": "turbo run dev --filter=@inkreach/api --filter=@inkreach/admin",
     "dev:api": "pnpm --filter @inkreach/api dev",
-    "build": "turbo run build",
-    "lint": "turbo run lint",
-    "format": "prettier --write \"**/*.{ts,js,json,md,vue}\"",
-    "type-check": "turbo run type-check",
-    "prisma:generate": "pnpm --filter @inkreach/api prisma:generate",
-    "prisma:migrate": "pnpm --filter @inkreach/api prisma:migrate",
-    "prisma:studio": "pnpm --filter @inkreach/api prisma:studio"
-  },
-  "devDependencies": {
-    "prettier": "^3.3.0",
-    "turbo": "^2.0.0"
-  },
-  "packageManager": "pnpm@10.33.2",
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "pnpm": {
-    "onlyBuiltDependencies": [
-      "@nestjs/core",
-      "@parcel/watcher",
-      "@prisma/client",
-      "@prisma/engines",
-      "bcrypt",
-      "esbuild",
-      "prisma",
-      "vue-demi"
-    ]
-  }
-}
+    "build": "turbo run build",
+    "lint": "turbo run lint",
+    "format": "prettier --write \"**/*.{ts,js,json,md,vue}\"",
+    "type-check": "turbo run type-check",
+    "prisma:generate": "pnpm --filter @inkreach/api prisma:generate",
+    "prisma:migrate": "pnpm --filter @inkreach/api prisma:migrate",
+    "prisma:studio": "pnpm --filter @inkreach/api prisma:studio"
+  },
+  "devDependencies": {
+    "prettier": "^3.3.0",
+    "turbo": "^2.0.0"
+  },
+  "packageManager": "pnpm@10.33.2",
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "@nestjs/core",
+      "@parcel/watcher",
+      "@prisma/client",
+      "@prisma/engines",
+      "bcrypt",
+      "esbuild",
+      "prisma",
+      "vue-demi"
+    ]
+  }
+}