feat: P1 profile/portrait API and freeze local-dev environment

Add host-first environment contracts (Local vs CI vs Prod), deps-only
compose, and the Profile → Portrait → deep-access mock payment slice
with device identity and auto-migrate on API startup.

Co-authored-by: Cursor <cursoragent@cursor.com>

.ai/ROADMAP.md

@@ -5,12 +5,19 @@ Do **not** build everything at once. Rules have maintenance cost.
 ## Phase 1 — Now (shipped)
 
 - Rules: constitution, architecture, domain, coding, api, database, ui, …
+- **Environment layer (FROZEN):** `environment.md` · `development.md` · `docker.md` · `deployment.md` · `commands.md`
 - ADR, patterns, examples, playbooks
-- Review / DoD / checklists / forbidden / commands / workflow / file-map
+- Review / DoD / checklists / forbidden / workflow / file-map
 - `ai-contract.md`
 - Cursor runtime: `.cursor/*` → symlink → `.ai/` (no content copy)
 
-**Invest next engineering time in:** polishing `patterns/`, `examples/`, `playbooks/` while building real features — not more rule files.
+**Invest next time in product implementation, not more meta-rules:**
+
+```
+产品冻结 → Domain → ERD → OpenAPI → 页面路由 → P1 编码
+```
+
+Do **not** expand the engineering-spec layer unless a repeated AI failure demands it.
 
 ## Phase 2 — When the codebase grows