feat(deploy): 自动初始化画布协作认证密钥

scripts/Initialize-SecurityEnv.ps1

@@ -56,7 +56,8 @@ function Initialize-SecurityEnv {
     $content = Get-Content $Path -Raw -Encoding UTF8
     if ($null -eq $content) { $content = "" }
     $definitions = @(
-        @{ Key = "CONFIG_JWT_SECRET"; Legacy = "this is a very secret secret"; MinLength = 32 }
+        @{ Key = "CONFIG_JWT_SECRET"; Legacy = "this is a very secret secret"; MinLength = 32 },
+        @{ Key = "WS_AUTH_WS_TICKET_SECRET"; Legacy = ""; MinLength = 32 }
     )
     if ($Mode -eq "new") {
         $definitions += @(
@@ -76,6 +77,14 @@ function Initialize-SecurityEnv {
         Write-Host "   [OK] Initialized security secret: $($definition.Key)" -ForegroundColor Green
     }
 
+    $authMethods = Get-EnvValue $content "WS_AUTH_METHODS"
+    if ([string]::IsNullOrWhiteSpace($authMethods)) { $authMethods = "none,bearer" }
+    $hasWsTicket = @($authMethods.Split(",") | ForEach-Object { $_.Trim() }) -contains "ws_ticket"
+    if (-not $hasWsTicket) {
+        $content = Set-EnvValue $content "WS_AUTH_METHODS" ($authMethods + ",ws_ticket")
+        Write-Host "   [OK] Added security config item: WS_AUTH_METHODS" -ForegroundColor Green
+    }
+
     if ($Mode -eq "new") {
         $adminPassword = Get-EnvValue $content "CONFIG_INITIAL_ADMIN_PASSWORD"
         if ($adminPassword.Length -lt 12) {