feat: P1 profile/portrait API and freeze local-dev environment

Add host-first environment contracts (Local vs CI vs Prod), deps-only
compose, and the Profile → Portrait → deep-access mock payment slice
with device identity and auto-migrate on API startup.

Co-authored-by: Cursor <cursoragent@cursor.com>

.ai/README.md

@@ -37,10 +37,10 @@ Also always: `ai-contract.md`, `forbidden.md`, `file-map.md`, `workflow.md`, `co
 ├── database.md
 ├── ui.md                 # IA pointer → design/
 ├── design/               # AI Design System Contract
-│   ├── design-system.md
-│   ├── component-catalog.md
-│   └── platform/
-├── deployment.md
+├── environment.md        # Local / CI / Prod 分离
+├── development.md        # 本地本机开发
+├── docker.md             # Docker 用途边界
+├── deployment.md         # 生产 / CI 部署
 ├── testing.md
 ├── security.md
 ├── review.md