M5-07: Production deployment, health check and release runbook

[pillowtalk-Qy]

Type: Deployment/Operations
Priority: P0
Initial status: Blocked for final acceptance; preview work可从 M2-11 提前
Owner: Ops/App
Depends on: deployable M2-11; final PASS requires M5-05 clear, M5-06 no hard fail
Blocks: Gate C/public submission
Writable: deployment config, health hardening, docs/release-runbook.md,
          secret-free env example

唯一目标

让支持 Node server/Moss SDK 的 production build 在线上和本地可重复启动、检查、回滚。

实施顺序

1. M2-11 后尽早建立 preview/production start，避免 8 月 4 日首次部署。
2. M5 阶段再做 secret、health、cold start、rollback 和 final public smoke。
3. 公共服务失败时保留本地 production fallback。

验收

[ ] production build/start
[ ] public /api/health
[ ] health 无 secret/full RPC URL
[ ] env vars and missing-env failure documented
[ ] platform supports Node server runtime
[ ] live/fixture modes 符合合同
[ ] restart/cold-start smoke
[ ] public URL no login
[ ] rollback target/command
[ ] local production fallback

验证

pnpm build
pnpm start
curl -fsS http://127.0.0.1:3000/api/health | jq
BASE_URL=http://127.0.0.1:3000 pnpm test:e2e:smoke
BASE_URL=https://<public-demo> pnpm test:e2e:smoke

Codex 指令

基于已选平台配置 production deploy/health/runbook。不得记录 secret，
不得让 health 暴露完整 RPC；验证 cold start、public smoke 和 rollback。

---

[pillowtalk-Qy]

Started after #55 merged-main CI passed. Finalizing the existing Vercel deployment contract and release runbook.

[pillowtalk-Qy]

Frozen SHA acc7a00b2e8f626ddc3f3c7276e2ed4c88e4f468 passed clean QA, zero-vulnerability production audit, local E2E 9/9, and Vercel preview E2E 9/9. PR #106 is in exact-head CI.