feat: v0.10.0 生产环境优化 — HTTPS、前端生产构建、安全加固

- feat(deploy): 前端多阶段构建 (vite build + nginx:alpine)，移除 Vite 开发模式
- feat(deploy): OpenResty HTTPS 配置 (SSL + HSTS + 安全头)
- fix(ws): WebSocket 路由添加 /api 前缀，修正前后端路径不匹配
- security: SSH AutoAddPolicy → WarningPolicy
- security: CORS 来源环境变量化 (CORS_ORIGINS)
- security: 限流器使用 X-Forwarded-For 真实客户端 IP
- perf(db): 数据库连接池配置 (pool_size=20, max_overflow=40)
- refactor: 移除硬编码 URL/IP (NTP、域名、微信代理)，改为环境变量
- chore: 更新 .env.example 模板，补充新增配置项
- chore: 清理 .reasonix/、scripts/、guide.md 无用文件
- docs: 更新 CLAUDE.md 至 v0.10.0，补充生产架构文档

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/app/core/config.py

@@ -21,12 +21,20 @@ class Settings(BaseSettings):
     CASDOOR_ORG_NAME: str
     CASDOOR_APP_NAME: str
     CASDOOR_CERTIFICATE: str = ""  # 支持文件路径或直接填 PEM 内容
-    CASDOOR_REDIRECT_URL: str = "http://localhost:5173/callback"
+    CASDOOR_REDIRECT_URL: str = ""
 
     SSH_TIMEOUT: int = 30
     CHECK_INTERVAL: int = 1800
     MANUAL_COOLDOWN: int = 300
 
+    # CORS & 前端
+    CORS_ORIGINS: str = ""  # 逗号分隔
+    FRONTEND_URL: str = "https://onu.dhdx.fun"
+
+    # NTP 同步配置
+    NTP_OLD_SERVER: str = "172.16.0.254"
+    NTP_NEW_SERVER: str = "172.16.1.252"
+
     # iMC API 配置（用于 ONU 远程重启和光功率查询）
     IMC_API_URL: str = ""
 
@@ -37,7 +45,7 @@ class Settings(BaseSettings):
     WECHAT_TOKEN: str = ""
     WECHAT_ENCODING_AES_KEY: str = ""
     WECHAT_USE_PROXY: bool = True
-    WECHAT_PROXY_API_URL: str = "https://api.v6ole.top"
+    WECHAT_PROXY_API_URL: str = ""
     IMC_API_USERNAME: str = ""
     IMC_API_PASSWORD: str = ""
     IMC_API_VERIFY_SSL: bool = False