全面审查优化: 43项修复（安全/性能/可靠性）+ 文档更新

🔴 P0 安全: .env入gitignore, CSP/HSTS, Logo安全(5MB限制+SVG消毒+SHA256), middleware权限收紧(VIP不能访问admin), 发布去重, GitHub认证, 删除危险API, skill-discoverer绕过审核修复, prisma默认连接修复
🔴 P0 可靠性: deepseek/github超时重试, 脚本层DeepSeek保护, 脚本启动验证, OAuth竞态修复
🔴 P0 性能: skill-discoverer N+1优化(↓94%), 后台API分页限制, getUserStats聚合优化
🟡 P1: 分类动态加载, 星级字段统一, fetch-logos并发Bug修复, 批量发布冲突不删除, check-tools重试, 前端空指针修复(13处), logo-fetcher日志, rate-limit清理, 公开API缓存

src/app/community/topic/[id]/page.tsx

@@ -79,9 +79,9 @@ export default async function TopicPage({ params }: Props) {
                 </div>
               )}
               <div>
-                <p className="text-sm font-medium">{topic.user.name || topic.user.email.split("@")[0]}</p>
+                <p className="text-sm font-medium">{topic.user.name || topic.user.email?.split("@")[0]}</p>
                 <p className="text-xs text-muted-foreground/50">
-                  {topic.createdAt.toLocaleDateString("zh-CN")} {topic.createdAt.toLocaleTimeString("zh-CN", { hour: "2-digit", minute: "2-digit" })}
+                  {topic.createdAt?.toLocaleDateString("zh-CN")} {topic.createdAt?.toLocaleTimeString("zh-CN", { hour: "2-digit", minute: "2-digit" })}
                 </p>
               </div>
               <div className="ml-auto flex items-center gap-3 text-xs text-muted-foreground/50">
@@ -113,9 +113,9 @@ export default async function TopicPage({ params }: Props) {
                       </div>
                     )}
                     <div>
-                      <p className="text-sm font-medium">{post.user.name || post.user.email.split("@")[0]}</p>
+                      <p className="text-sm font-medium">{post.user.name || post.user.email?.split("@")[0]}</p>
                       <p className="text-xs text-muted-foreground/50">
-                        {post.createdAt.toLocaleDateString("zh-CN")} {post.createdAt.toLocaleTimeString("zh-CN", { hour: "2-digit", minute: "2-digit" })}
+                        {post.createdAt?.toLocaleDateString("zh-CN")} {post.createdAt?.toLocaleTimeString("zh-CN", { hour: "2-digit", minute: "2-digit" })}
                       </p>
                     </div>
                     {isTopicAuthor && (