全项目扫描修复: Docker数据卷修复+安全requireAdmin+12页SEO+API白名单+脚本超时+常量提取+假数据删除

.dockerignore

@@ -0,0 +1,86 @@
+# 排除构建时不需要的目录
+node_modules
+.next
+out
+dist
+build
+coverage
+.git
+.gitignore
+.github
+.vscode
+.idea
+
+# 本地环境 / 凭据
+.env
+.env.local
+.env.*.local
+.env.production
+
+# 日志 / 缓存
+*.log
+logs
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.npm
+.pnpm-store
+.cache
+.turbo
+
+# 临时文件
+tmp
+temp
+*.tmp
+*.bak
+*.swp
+.DS_Store
+Thumbs.db
+
+# 调试 / 一次性脚本
+scripts/_*.sh
+scripts/_*.cjs
+scripts/_*.mjs
+scripts/_*.py
+scripts/check-*.mjs
+scripts/check-*.cjs
+scripts/check-*.py
+scripts/debug-*.mjs
+scripts/debug-*.py
+scripts/test-*.mjs
+scripts/test-*.sh
+scripts/parse-*.py
+scripts/find-*.py
+scripts/render-test.py
+scripts/verify-*.py
+scripts/verify-*.sh
+scripts/fix-*.cjs
+scripts/fix-*.mjs
+scripts/fix-*.sh
+scripts/seed-*.mjs
+scripts/migrate-*.mjs
+scripts/cleanup-*.mjs
+scripts/delete-*.mjs
+scripts/backfill-*.mjs
+scripts/reconcile-*.mjs
+scripts/organize-*.mjs
+scripts/sync-*.mjs
+scripts/publish-*.mjs
+scripts/generate-*.mjs
+scripts/add-*.mjs
+scripts/run-*.mjs
+scripts/version-manager.mjs
+scripts/health-check.mjs
+scripts/db-status.mjs
+scripts/_check-server.sh
+
+# 数据 / 资源 (挂载卷会覆盖, 镜像里放占位即可)
+data/
+public/bot-avatars/
+
+# 备份目录
+.backup-*
+Pem/
+
+# 项目本地临时文件
+_avatar_test_*.jpg