docs: 从 main 同步 AGENTS、文档与部署脚本

scripts/deploy-lib.sh

@@ -156,9 +156,11 @@ validate_prod_env() {
   [ -n "$postgres_password" ] || die ".env.docker 缺少 POSTGRES_PASSWORD"
   [ -n "$jwt_secret" ] || die ".env.docker 缺少 JWT_SECRET"
 
-  if [ "$allow_defaults" != "true" ]; then
-    [ "$postgres_password" != "thebet365" ] || die "POSTGRES_PASSWORD 仍是示例值；如确为测试环境，请加 --allow-default-secrets"
-    [ "$jwt_secret" != "change-me-in-production-use-long-random-string" ] || die "JWT_SECRET 仍是示例值；如确为测试环境，请加 --allow-default-secrets"
+  if [ "$postgres_password" = "thebet365" ]; then
+    warn "POSTGRES_PASSWORD 仍是示例值 thebet365，生产环境建议尽快修改"
+  fi
+  if [ "$jwt_secret" = "change-me-in-production-use-long-random-string" ]; then
+    warn "JWT_SECRET 仍是示例值，生产环境建议尽快修改"
   fi
 
   if [ "$seed_database" = "true" ]; then