feat(cli+skill): make documented field UX real + fix skill doc drift

CLI (packages/inkreach-cli):
- new src/lib/field-normalize.ts: type aliases (sel/num/text/mul/…),
  select string-choices -> {name}, compact --fields 'Name:type:choices'
  expansion, smart type inference from --options shape / --name
  (--type now optional), name->ID resolution for foreignTableName /
  linkFieldName / lookupFieldName (incl. link-field foreignTableId
  backfill + unknown-key stripping), rating/number/button required-
  option defaults
- field create: +--description/--lookup-options/--is-lookup
- field update --options + table create --fields route through the
  normalizer; DEFAULT_ENDPOINT :3000 -> :3003
- 20 unit tests (field-normalize.spec.ts, vitest); live-verified:
  string choices, alias, foreignTableName, lookup-by-names, compact
  format, inference (priority->singleSelect, max:5->rating)

Skill docs (.agents/skills/inkreach-teable):
- ports :3000 -> :3003 everywhere (backend real port; :3000 is an
  unrelated container on this host)
- remove dead hr_admin account; note throwaway signup + real admin
- plugin register: actual URL-based flags; document plugin csp
  list/set; view/dashboard install requires config enable first
- field-types.md marked verified-2026-08 (aliases/inference/name
  resolution now implemented + tested)
- development.md: webpack dist/index.js cache trap; PGPASSWORD
  placeholder instead of wrong literal

.agents/skills/inkreach-teable/guides/instance-access.md

@@ -8,29 +8,30 @@ endpoint/ports for your own deployment.
 
 | Service | URL / Port | Mode | Purpose |
 |---------|-----------|------|---------|
-| Backend API | `http://localhost:3000` | production (`NODE_ENV=production`) | REST API, automation engine, websocket |
+| Backend API | `http://localhost:3003` | production (`NODE_ENV=production`) | REST API, automation engine, websocket |
 | Frontend | `http://localhost:3002` | production | End-user web UI (Next.js) |
 | PostgreSQL | `localhost:5432` | — | Database (db: `teable`, user: `teable`) |
 | Redis | `localhost:6379` | — | BullMQ queue for automation runs, distributed lock |
 
-- The frontend reads `SOCKET_PORT=3000` from `.env` to point its websocket at the backend. Don't let it fall back to `3001`.
-- End users browse `:3002`. The backend `:3000` is the API only (`BACKEND_SKIP_NEXT_START=true` disables the embedded Next server).
+- The frontend reads `SOCKET_PORT` from `.env` to point its websocket at the backend — verify it equals the backend port (3003 on this host), not the default 3001.
+- End users browse `:3002`. The backend `:3003` is the API only (`BACKEND_SKIP_NEXT_START=true` disables the embedded Next server).
+- ⚠️ Port map differs from upstream Teable docs (:3000) — on this host `:3000` is held by an **unrelated container** (`inkreach-web`). Always verify with `ss -tlnp` before assuming.
 
 ## Health Checks
 
 ```bash
 # Backend API up?
-curl -s -o /dev/null -w '%{http_code}' http://localhost:3000/api/auth/signin -X POST \
+curl -s -o /dev/null -w '%{http_code}' http://localhost:3003/api/auth/signin -X POST \
   -H 'Content-Type: application/json' -d '{}'   # expect 401 (endpoint exists, bad creds)
 
 # Frontend up?
 curl -s -o /dev/null -w '%{http_code}' http://localhost:3002   # expect 307 or 200
 
 # Ports listening?
-ss -tlnp | grep -E ':3000|:3002|:5432|:6379'
+ss -tlnp | grep -E ':3003|:3002|:5432|:6379'
 ```
 
-If `:3000` is unreachable but systemd shows `active`, the worker likely OOM-crashed while the `pnpm` parent stayed alive:
+If `:3003` is unreachable but systemd shows `active`, the worker likely OOM-crashed while the `pnpm` parent stayed alive:
 ```bash
 systemctl --user stop teable-backend.service
 pkill -9 -f 'dist/index.js'
@@ -58,14 +59,15 @@ Note: `auth token list/create` may require a **session** (browser login) rather
 
 ### Configure the CLI
 ```bash
-inkreach-teable auth login --endpoint http://localhost:3000 --token <PAT> --base-id bseXXX
+inkreach-teable auth login --endpoint http://localhost:3003 --token <PAT> --base-id bseXXX
 inkreach-teable auth status   # verify
 ```
 
 ## Reference Credentials (local dev)
 
 > Never commit real secrets. The reference dev instance uses:
-> - Admin: `hr_admin@xingchen.tech` / (ask maintainer) — for browser login only.
+> - ⚠️ The old admin account `hr_admin@xingchen.tech` **no longer exists** (verified 2026-08). Current users: `inkreach@inkreach.pod` (admin) — password: ask maintainer, browser login only.
+> - Throwaway accounts for testing can be created via `POST /api/auth/signup` (open on this instance).
 > - Base: `bseeZR7yiDNeMPCa4CN` (人事薪资管理) — the test base with ~600 automations.
 > - Test table: `tblzPOXQvUruQosKNP5` (has button fields for automation testing).