feat: P1 profile/portrait API and freeze local-dev environment

Add host-first environment contracts (Local vs CI vs Prod), deps-only
compose, and the Profile → Portrait → deep-access mock payment slice
with device identity and auto-migrate on API startup.

Co-authored-by: Cursor <cursoragent@cursor.com>

packages/types/src/index.ts

@@ -5,17 +5,30 @@ export interface ApiResponse<T = unknown> {
   data?: T
 }
 
-/** User profile used by decode / relation features. */
+/** 个人档案 */
 export interface Profile {
   id: string
-  label: string
-  year: number
-  month: number
-  day: number
+  user_id: string
   relation: 'self' | 'other'
+  display_name: string
+  birth_date: string
+  relation_type?: string | null
+  created_at: string
 }
 
-/** Minimal scale list item. */
+/** 成长报告（detail 可能因权益被剥离） */
+export interface GrowthReport {
+  id: string
+  user_id: string
+  profile_id: string
+  type: string
+  summary: Record<string, unknown>
+  detail?: Record<string, unknown> | null
+  has_deep_access: boolean
+  created_at: string
+}
+
+/** 探索测试列表项 */
 export interface ScaleSummary {
   slug: string
   name: string