feat: P1 profile/portrait API and freeze local-dev environment

Add host-first environment contracts (Local vs CI vs Prod), deps-only compose, and the Profile → Portrait → deep-access mock payment slice with device identity and auto-migrate on API startup. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-02 16:24:57 +08:00
parent dd94e57277
commit 0f320e040b
49 changed files with 1907 additions and 191 deletions
@@ -17,6 +17,7 @@ After coding, check every item. Output a Review block.
 | Deployment | Migration / health / env noted if needed? |
 | Docs | OpenAPI / PRD touch if public behavior changed? |
 | Design | UI change? Tokens + catalog + platform contract followed? |
+| Environment | Local workflow still host Go/Vite + deps-only compose? No Docker-only coding? |
 | Scope | No unrelated files modified? |

 ## Output format (required)
@@ -34,6 +35,7 @@ After coding, check every item. Output a Review block.
 - Deployment: PASS | FAIL — <note>
 - Docs: PASS | FAIL — <note>
 - Design: PASS | FAIL | N/A — <note>
+- Environment: PASS | FAIL | N/A — <note>
 - Scope: PASS | FAIL — <note>
 ```