refactor(release): 改为 Agent 双阶段人工发布

删除 Gitea Actions、Tag/Main 自动流水线和旧 Runner 配置，取消 Git 操作与发布授权的绑定。\n\n新增本地镜像发布、固定生产部署助手、digest manifest、迁移安全检查、simulation 冒烟及显式回滚流程。\n\n验证：pnpm lint、pnpm test、pnpm build、Go 全量测试、ShellCheck、Compose 配置、人工发布测试和 linux/amd64 完整栈冒烟。

Dockerfile

@@ -57,15 +57,16 @@ ENV APP_ENV=production \
 CMD ["/app/easyai-ai-gateway"]
 
 FROM --platform=$BUILDPLATFORM ${NODE_BUILD_IMAGE} AS web-builder
+ARG NPM_CONFIG_REGISTRY=https://registry.npmjs.org
 
 WORKDIR /src
-RUN npm install -g pnpm@10.18.1
+RUN npm install --registry "$NPM_CONFIG_REGISTRY" -g pnpm@10.18.1
 
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml nx.json ./
 COPY apps/web/package.json apps/web/package.json
 COPY packages/contracts/package.json packages/contracts/package.json
 RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
-    pnpm install --frozen-lockfile
+    pnpm install --frozen-lockfile --registry "$NPM_CONFIG_REGISTRY"
 
 COPY packages packages
 COPY apps/web apps/web