全面审查优化: 43项修复（安全/性能/可靠性）+ 文档更新

🔴 P0 安全: .env入gitignore, CSP/HSTS, Logo安全(5MB限制+SVG消毒+SHA256), middleware权限收紧(VIP不能访问admin), 发布去重, GitHub认证, 删除危险API, skill-discoverer绕过审核修复, prisma默认连接修复
🔴 P0 可靠性: deepseek/github超时重试, 脚本层DeepSeek保护, 脚本启动验证, OAuth竞态修复
🔴 P0 性能: skill-discoverer N+1优化(↓94%), 后台API分页限制, getUserStats聚合优化
🟡 P1: 分类动态加载, 星级字段统一, fetch-logos并发Bug修复, 批量发布冲突不删除, check-tools重试, 前端空指针修复(13处), logo-fetcher日志, rate-limit清理, 公开API缓存

src/app/user/[id]/page.tsx

@@ -90,14 +90,14 @@ export default async function UserProfilePage({ params }: Props) {
           <div className="pt-16 px-6 pb-6">
             <div className="flex items-start justify-between flex-wrap gap-4">
               <div>
-                <h1 className="text-xl font-bold">{user.name || user.email.split("@")[0]}</h1>
+                <h1 className="text-xl font-bold">{user.name || user.email?.split("@")[0]}</h1>
                 <p className="text-sm text-muted-foreground/60 mt-1">{user.email}</p>
                 {user.bio && <p className="text-sm mt-2 text-muted-foreground/70">{user.bio}</p>}
                 <div className="mt-2 flex items-center gap-2 flex-wrap">
                   <MemberBadge level={user.level} points={user.points} size="md" />
                   <span className="text-xs text-muted-foreground/50 flex items-center gap-1">
                     <Calendar className="w-3 h-3" />
-                    注册于 {user.createdAt.toLocaleDateString("zh-CN")}
+                    注册于 {user.createdAt?.toLocaleDateString("zh-CN")}
                   </span>
                 </div>
               </div>
@@ -139,7 +139,7 @@ export default async function UserProfilePage({ params }: Props) {
                       <h3 className="text-sm font-medium">{topic.title}</h3>
                       <div className="mt-1 flex items-center gap-2 text-xs text-muted-foreground/50">
                         <span>{topic.category.name}</span>
-                        <span>{topic.createdAt.toLocaleDateString("zh-CN")}</span>
+                        <span>{topic.createdAt?.toLocaleDateString("zh-CN")}</span>
                       </div>
                     </div>
                   </Link>
@@ -163,7 +163,7 @@ export default async function UserProfilePage({ params }: Props) {
                         {target && (
                           <div className="mt-1 flex items-center gap-2 text-xs text-muted-foreground/50">
                             <span>于 {comment.tool ? "工具" : "技能"}: {target.name}</span>
-                            <span>{comment.createdAt.toLocaleDateString("zh-CN")}</span>
+                            <span>{comment.createdAt?.toLocaleDateString("zh-CN")}</span>
                           </div>
                         )}
                       </div>