完善 readiness、发布追溯与敏感治理（07-15-production-trust-closeout-cleanup）

deploy/trialrun/.env.example

@@ -31,7 +31,7 @@ SIGNED_URL_TTL_SECONDS=600
 MAX_UPLOAD_SIZE_BYTES=10485760
 
 # ===== 服务端密钥（必须修改） =====
-JWT_SECRET=change_me_in_trialrun
+JWT_SECRET=<managed-jwt-secret>
 FIELD_ENCRYPTION_KEY=
 
 # ===== 密码 / 登录安全 =====
@@ -85,11 +85,11 @@ WECOM_APPROVAL_CALLBACK_EVIDENCE_FILE=
 IM_NOTIFIER_ENABLED=true
 
 # ===== 数据库（Compose 内部连接） =====
-POSTGRES_DB=hyb_oa
-POSTGRES_USER=hyboa_user
-POSTGRES_PASSWORD=hyboa_password
-DATABASE_URL=postgresql://hyboa_user:hyboa_password@db:5432/hyb_oa?schema=public
-# SHADOW_DATABASE_URL=postgresql://hyboa_user:hyboa_password@db:5432/hyb_oa_shadow
+POSTGRES_DB=<managed-db-name>
+POSTGRES_USER=<managed-db-user>
+POSTGRES_PASSWORD=<managed-db-password>
+DATABASE_URL=<managed-postgresql-url>
+# SHADOW_DATABASE_URL=<managed-shadow-postgresql-url>
 
 # ===== 存储与上传 =====
 STORAGE_DIR=/data/storage
@@ -97,11 +97,11 @@ STORAGE_DRIVER=local
 S3_ENDPOINT=http://minio:9000
 S3_REGION=us-east-1
 S3_BUCKET=hyb-oa
-S3_ACCESS_KEY_ID=minioadmin
-S3_SECRET_ACCESS_KEY=minioadmin
+S3_ACCESS_KEY_ID=<managed-s3-access-key>
+S3_SECRET_ACCESS_KEY=<managed-s3-secret>
 S3_FORCE_PATH_STYLE=true
-MINIO_ROOT_USER=minioadmin
-MINIO_ROOT_PASSWORD=minioadmin
+MINIO_ROOT_USER=<managed-minio-user>
+MINIO_ROOT_PASSWORD=<managed-minio-password>
 
 # ===== OCR（off | mock | tencent） =====
 OCR_PROVIDER=mock
@@ -154,7 +154,7 @@ INTEGRATION_OUTBOX_RETRY_SECONDS=120
 
 # ===== 邮件 =====
 EMAIL_ENABLED=false
-EMAIL_FROM=[email protected]
+EMAIL_FROM=<sender-email>
 EMAIL_BASE_URL=https://oa.example.com
 SMTP_HOST=
 SMTP_PORT=587
@@ -177,10 +177,10 @@ AI_TIMEOUT_MS=10000
 AI_AUTH_TOKEN=
 
 # ===== Trialrun 初始化管理员 =====
-TRIALRUN_ADMIN_EMAIL=admin@hyinda.com
-TRIALRUN_ADMIN_PHONE=13800000000
+TRIALRUN_ADMIN_EMAIL=<admin-email>
+TRIALRUN_ADMIN_PHONE=<admin-phone>
 TRIALRUN_ADMIN_PASSWORD=
-TRIALRUN_ADMIN_EMPLOYEE_NO=T0000
+TRIALRUN_ADMIN_EMPLOYEE_NO=<admin-employee-no>
 TRIALRUN_ADMIN_NAME=Trialrun Admin
 TRIALRUN_ADMIN_TITLE=系统管理员
 TRIALRUN_ADMIN_HIRE_DATE=2020-01-01