fix: restore post-v1.1.14 features while preserving asset updates

Undo the full-tree rollback in 6ea1b3d and restore the pre-rollback v1.2.0 code. Preserve the new asset flow rules, abnormal inventory separation, range drilldowns and date picker; adapt the regression test to the restored routes layout.

docker-compose.yml

@@ -1,25 +1,29 @@
 version: '3.8'
 
+# 凭据一律通过 Portainer / 环境变量注入，不再写入本文件。
+# 注意：此前提交到 Git 的数据库口令与 JWT 密钥已视为泄漏，必须轮换后再使用。
+# JWT_SECRET 至少要 32 个字符，缺失时服务会拒绝启动（src/server/config.ts）。
+
 services:
   ln-bi:
-    image: harbor.lnh2e.com/lingniu-v1/ln-bi:main-1.0.0
+    image: harbor.lnh2e.com/lingniu-v1/ln-bi:main-1.2.0
     network_mode: host
     environment:
-      DB_HOST: "rm-bp179zbv481rnw3e2no.mysql.rds.aliyuncs.com"
-      DB_PORT: "3306"
-      DB_USER: "oneos_db_prod"
-      DB_PASSWORD: "adASHJcviqwjkbn23ngt1"
-      DB_NAME: "ln_asset_management"
-      HYDROGEN_DB_HOST: "47.99.185.173"
-      HYDROGEN_DB_PORT: "3306"
-      HYDROGEN_DB_USER: "root"
-      HYDROGEN_DB_PASSWORD: "lnMysql."
-      HYDROGEN_DB_NAME: "ln_asset_management"
-      MILEAGE_DB_HOST: "101.133.130.65"
-      MILEAGE_DB_PORT: "3306"
-      MILEAGE_DB_USER: "bi_reader_02"
-      MILEAGE_DB_PASSWORD: "bi_reader_02_Pass"
-      MILEAGE_DB_NAME: "hydrogen_energy"
+      NODE_ENV: "production"
+      # 生产必须保持为 0：该开关会绕过全部认证。
+      DEV_BYPASS_AUTH: "0"
+      DB_HOST: "${DB_HOST:?请注入主业务库地址}"
+      DB_PORT: "${DB_PORT:-3306}"
+      DB_USER: "${DB_USER:?请注入主业务库只读账号}"
+      DB_PASSWORD: "${DB_PASSWORD:?请注入主业务库口令}"
+      DB_NAME: "${DB_NAME:-ln_asset_management}"
+      # 氢能库未配置时复用主库，因此默认不再单独注入；如需独立只读库再配置。
+      HYDROGEN_DB_HOST: "${HYDROGEN_DB_HOST:-}"
+      HYDROGEN_DB_PORT: "${HYDROGEN_DB_PORT:-3306}"
+      HYDROGEN_DB_USER: "${HYDROGEN_DB_USER:-}"
+      HYDROGEN_DB_PASSWORD: "${HYDROGEN_DB_PASSWORD:-}"
+      HYDROGEN_DB_NAME: "${HYDROGEN_DB_NAME:-}"
+      HYDROGEN_TENANT_ID: "${HYDROGEN_TENANT_ID:-000000}"
       # ECS production accesses OneOS over the private network. Configure the key
       # as a Portainer stack environment variable; never commit it to this file.
       ONEOS_MILEAGE_API_BASE_URL: "${ONEOS_MILEAGE_API_BASE_URL:-http://172.17.111.55:20310}"
@@ -27,7 +31,9 @@ services:
       ONEOS_MILEAGE_API_TIMEOUT_MS: "${ONEOS_MILEAGE_API_TIMEOUT_MS:-20000}"
       SERVER_PORT: "8111"
       EXTERNAL_API_BASE: "https://lnh2e.com"
-      JWT_SECRET: "ln-bi-jwt-prod-k8s9m2x7"
+      BI_AUTH_MODE: "${BI_AUTH_MODE:-sso}"
+      BI_AUTH_PASSWORD: "${BI_AUTH_PASSWORD:-}"
+      JWT_SECRET: "${JWT_SECRET:?请注入至少 32 字符的随机签名密钥}"
       AMAP_WEB_KEY: "${AMAP_WEB_KEY}"
       AMAP_SECURITY_JS_CODE: "${AMAP_SECURITY_JS_CODE}"
       HEATMAP_DB_HOST: "${HEATMAP_DB_HOST}"
@@ -36,6 +42,13 @@ services:
       HEATMAP_DB_PASSWORD: "${HEATMAP_DB_PASSWORD}"
       HEATMAP_DB_NAME: "${HEATMAP_DB_NAME:-lingniu_vehicle_data}"
       HEATMAP_DB_SSL: "${HEATMAP_DB_SSL:-false}"
+      # 用户反馈截图上传所需；此前缺失会导致反馈上传必然失败。
+      OSS_REGION: "${OSS_REGION}"
+      OSS_ENDPOINT: "${OSS_ENDPOINT}"
+      OSS_BUCKET: "${OSS_BUCKET}"
+      OSS_ACCESS_KEY_ID: "${OSS_ACCESS_KEY_ID}"
+      OSS_ACCESS_KEY_SECRET: "${OSS_ACCESS_KEY_SECRET}"
+      OSS_BASE_DIR: "${OSS_BASE_DIR}"
     deploy:
       replicas: 1
       restart_policy: