fix(deploy): 稳定边缘到站点的固定入口

主机本地访问跨站点 NodePort 时 kube-proxy 会随机选择不可达的对端 Pod，导致约四分之一请求被拒绝。为两地应用绑定仅位于 WireGuard 地址的 HostPort 31088/31178，双 NGINX 和集群验收改用该固定入口；原 NodePort 30088/30178 继续保留。端口处于现有公网 DROP、wg0 私网放行范围。\n\n验证：kubectl kustomize、服务端 dry-run、bash -n、ShellCheck、Secret 与 digest 静态检查、git diff --check。

deploy/nginx/ai.51easyai.com-cluster.conf

@@ -1,15 +1,15 @@
 upstream easyai_gateway_api {
   least_conn;
   keepalive 64;
-  server 10.77.0.1:30088 max_fails=2 fail_timeout=5s;
-  server 10.77.0.2:30088 max_fails=2 fail_timeout=5s;
+  server 10.77.0.1:31088 max_fails=2 fail_timeout=5s;
+  server 10.77.0.2:31088 max_fails=2 fail_timeout=5s;
 }
 
 upstream easyai_gateway_web {
   least_conn;
   keepalive 32;
-  server 10.77.0.1:30178 max_fails=2 fail_timeout=5s;
-  server 10.77.0.2:30178 max_fails=2 fail_timeout=5s;
+  server 10.77.0.1:31178 max_fails=2 fail_timeout=5s;
+  server 10.77.0.2:31178 max_fails=2 fail_timeout=5s;
 }
 
 server {

deploy/nginx/cluster-acceptance-origin-ningbo.conf

@@ -19,6 +19,6 @@ server {
     proxy_read_timeout 3600s;
     proxy_request_buffering off;
     proxy_buffering off;
-    proxy_pass http://10.77.0.1:30088;
+    proxy_pass http://10.77.0.1:31088;
   }
 }