fix(energy): checkpoint validated drill pagination and read-only preview

Co-authored-by: HiFox Agent <agents-noreply@hifox.com>

src/server/read-only-middleware.ts

@@ -0,0 +1,10 @@
+import type { MiddlewareHandler } from 'hono';
+
+/** Guard preview write endpoints before auth/route handlers can perform work. */
+export const readOnlyMiddleware: MiddlewareHandler = async (context, next) => {
+  if (process.env.DB_READ_ONLY === '1'
+    && !['GET', 'HEAD', 'OPTIONS'].includes(context.req.method)) {
+    return context.json({ error: '当前为只读预览环境，不允许写入操作' }, 403);
+  }
+  return next();
+};