docs: 补依赖清单与 README

此前仓库无任何依赖声明。按 AST 扫描全部 import 后按用途切分：
requirements.txt 为核心运行时 8 个包，requirements-dev.txt 追加测试与
research/ 所需。

matplotlib / mplfinance / xgboost / scikit-learn 只出现在 ChanPY.py、
ChanLun_Classifier.py、Find_Trend.py、ChanHeng.py 这四个零引用文件中，
故不纳入清单；ChanPY.py 依赖的外部 chan.py 库本就未安装。

README 记录目录结构、启动方式、库用法、分析流程九步与数据约定，并注明
三处现存问题：web/DEPLOY_GUIDE.md 引用的 6 个部署脚本已在 7f393b9 删除、
web/README.txt 指向不存在的 web/requirements.txt、systemd unit 的端口
8123 与 config.py 默认的 8128 不一致且 gunicorn 未声明。

清单已在全新空 venv 中验证：仅装 requirements.txt 时 57 个模块可导入、
Flask 16 条路由正常；装 dev 清单后测试 24 通过。

Co-authored-by: Cursor <cursoragent@cursor.com>

requirements.txt

@@ -0,0 +1,29 @@
+# Core runtime — what `web/` and `chanlun/` need to run.
+#
+#   python -m venv .venv && .venv/bin/pip install -r requirements.txt
+#
+# Tests and research/ pull in more; see requirements-dev.txt.
+#
+# Requires Python >= 3.11 (imposed by pandas 3.x / numpy 2.x, not by our code).
+#
+# Lower bounds are the oldest versions believed safe. Verified set as of
+# 2026-08-27 on Python 3.14.4:
+#   pandas 3.0.5 · numpy 2.5.2 · Flask 3.1.3 · requests 2.34.2
+#   python-dateutil 2.9.0 · pytz 2026.3 · ccxt 4.5.75 · akshare 1.18.94
+
+# chanlun/ — kline pipeline and indicators.
+# pandas >= 2.2 for the "5min" offset alias used by chanlun/pipeline/resample.py.
+pandas>=2.2
+numpy>=1.26
+
+# web/ — Flask API and templates.
+Flask>=3.0
+requests>=2.31
+python-dateutil>=2.9
+pytz>=2024.1
+
+# Market data. ccxt drives the live websocket/REST state in
+# web/services/runtime/state.py; akshare only backs the A-share endpoints in
+# web/services/cn_stock.py.
+ccxt>=4.4
+akshare>=1.16