Merge pull request 'chore(release): 发布后端性能修复清单并复用前端镜像' (#4) from codex/expense-index-followup-release-20261013 into main

完成 API Key 加密、旧部署兼容及迁移支持。

本地验收通过；宁波服务器验收尚未执行。
任务：credential-ningbo-20261012

system-update/release-manifest.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 1,
   "channel": "stable",
-  "releaseId": "3.28.2.20261011.4-86e94f19e538",
-  "productVersion": "3.28.2.20261011.4",
+  "releaseId": "3.29.0.20261013.4-cf610b56e244",
+  "productVersion": "3.29.0.20261013.4",
   "platform": "linux/amd64",
-  "publishedAt": "2026-10-11T09:46:39.697960+00:00",
+  "publishedAt": "2026-10-13T10:37:11.568728+00:00",
   "managedUpdateAllowed": true,
   "scheduledUpdateAllowed": true,
-  "rollbackSafe": true,
+  "rollbackSafe": false,
   "minimumUpdaterVersion": "1.1.0",
   "minimumDeploymentSchemaVersion": 2,
   "requiredFreeBytes": 8589934592,
@@ -15,9 +15,9 @@
     {
       "key": "server-main",
       "image": "registry.cn-shanghai.aliyuncs.com/comfy-ai/comfy-server",
-      "digest": "sha256:2077104a3d9f1cba68eb31911bb00a26d2c154eda2c897fb031c162559379e11",
-      "buildId": "607c5ee243936bba394579c7bc94ca0b2f62cda6",
-      "imageSizeBytes": 989020204
+      "digest": "sha256:5a0338b2a6e097af0f5aac1a4adba0ccfd60382cb38e12df2ccd29cf54fbccf2",
+      "buildId": "cf610b56e244ccafb802340a2a0b8d46057c8fd5",
+      "imageSizeBytes": 2723904699
     },
     {
       "key": "ws-gateway",
@@ -29,9 +29,9 @@
     {
       "key": "web",
       "image": "registry.cn-shanghai.aliyuncs.com/comfy-ai/one-ai",
-      "digest": "sha256:279da715ec67c2017c06ca31c8f7e172b703b99c5378404d24198af919c460dc",
-      "buildId": "f1925755cb481b9c3a609996333d26bf47da5302",
-      "imageSizeBytes": 347958996
+      "digest": "sha256:15ed1b57ef98d2dc8ba63aac899c500ca3b6e6884b448eba006ec00aebccd2e5",
+      "buildId": "e443f7a105bd9ffac6b710759d29a83c935bb56e",
+      "imageSizeBytes": 348002197
     }
   ]
 }