上线版: 产品表单统一+form嵌套修复+用户管理+部署+三套叙事

- 产品编辑入口统一走 ProductFormFull(卖点/风格/人群/品牌词全字段);
  修复开任务页 <form> 套 <form> 致"编辑产品"报错、改不了、跳回首个产品
- dashboard 入口卡片对齐实际路由: 系统管理(/config) 与 工作配置(/settings) 分开;
  settings ?tab=products 直达改用挂载后读 URL, 消除 hydration mismatch
- 新增用户管理(users API/admin service/改密页) + alembic 022/023/024
- 上线部署: Dockerfile / docker-compose.prod+https / nginx https / .env.example
- A8 三套正交叙事(痛点/场景/成分背书) + beige 调色去AI化 + 飞轮 text_import 高权重信号

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.env.example

@@ -0,0 +1,43 @@
+APP_ENV=production
+
+# Required secrets: generate unique values for every customer environment.
+FERNET_KEY=replace-with-32-plus-character-fernet-key
+JWT_SECRET=replace-with-32-plus-character-jwt-secret
+
+# Database credentials used by docker-compose.prod.yml.
+MYSQL_ROOT_PASSWORD=replace-with-strong-root-password
+MYSQL_DB=clover
+MYSQL_USER=clover
+MYSQL_PASSWORD=replace-with-strong-db-password
+
+DATABASE_URL=mysql+pymysql://clover:replace-with-strong-db-password@mysql:3306/clover
+MONGO_URI=mongodb://mongo:27017/clover_trace
+REDIS_URL=redis://redis:6379/0
+
+# Public URLs.
+# If frontend and API share the same domain through nginx, keep NEXT_PUBLIC_* empty.
+# If using split domains, set them to the public backend origin, such as https://api.example.com.
+# NEXT_PUBLIC_* are build-time variables. After changing them, rebuild the frontend image.
+NEXT_PUBLIC_API_BASE_URL=
+NEXT_PUBLIC_SSE_BASE_URL=
+# Production should use the real customer domain(s). Do not use "*" in production.
+CORS_ALLOW_ORIGINS=https://your-domain.example
+
+# Image/text provider routing.
+IMAGE_PROVIDER_PRIMARY=gpt
+IMAGE_PROVIDER_FALLBACK=gemini
+IMAGE_MODEL=gpt-image-2
+MODEL_IMAGE=gpt-image-2
+MODEL_TEXT=claude-opus-4-8
+APIPORTS_BASE_URL=https://api.apiyi.com/v1
+CODEPROXY_BASE_URL=
+GEMINI_API_URL=https://generativelanguage.googleapis.com/v1beta
+
+# Optional platform keys. Normal customer keys should be entered in the UI.
+APIPORTS_KEY=
+CODEPROXY_KEY=
+
+MAX_CONCURRENT_TASKS_PER_USER=5
+UVICORN_WORKERS=2
+UPLOAD_BASE_PATH=uploads/packages
+UPLOAD_ABS_ROOT=/app/uploads