feat: P1 profile/portrait API and freeze local-dev environment

Add host-first environment contracts (Local vs CI vs Prod), deps-only
compose, and the Profile → Portrait → deep-access mock payment slice
with device identity and auto-migrate on API startup.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/README.md

@@ -0,0 +1,11 @@
+# Deploy & local deps
+
+| File | Use |
+|---|---|
+| `../docker-compose.dev.yml` | **Local**：Postgres（及日后 Redis） |
+| `docker-compose.yml` | 兼容入口 → include dev compose |
+| `docker-compose.prod.yml` | 生产（待发布任务添加） |
+| `Dockerfile.*` | 生产/CI 镜像（待发布任务添加） |
+| `.env.example` | 环境变量模板 |
+
+日常写代码：本机 Go + Vite；Docker 只起依赖。见 `.ai/development.md`。