Create staging mutation payloads in randomized deploy-owned temporary directories so migration and deployment do not require writes under the protected application root.
Add database-backed administrators, configurable Alipay packages, idempotent payment settlement and platform reporting. Standardize Gitea workflows on the xiaoxin runner so reviewed staging commits are tested, packaged, and deployed by immutable image digest.
linmeng