chore(env): add AUTH_SECRET for next-auth across environments

- Add per-environment AUTH_SECRET (dev/test/prod) for next-auth v4 JWT signing
- Temporarily redirect next start stdout/stderr to LOG_FILE in post-receive hook for server error debugging

env-example/.env.development.example

@@ -15,6 +15,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# dev 环境独立密钥（**不**与 test / prod 共用）
+AUTH_SECRET=PinzhujxR/qMPrY7bAor8qQlwmmy1tJJCex9Tomhk2c=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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
@@ -24,5 +28,3 @@ AUTH_FACEBOOK_SECRET=004b1a9384b3433e153992e5edcef4ad
 # Cloudflare CDN（test / production 部署后刷缓存用）
 CF_ZONE_ID=b1b6bfb7795667609c8e7f418af0156b
 CF_API_TOKEN=cfut_xyHb70XCw0j8f5Wz5fg5PemUQ2ZHnSpWvmrBvVeK94d3b00f
-
-

env-example/.env.local.example

@@ -9,6 +9,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# test 环境独立密钥（**不**与 dev / prod 共用）
+AUTH_SECRET=rKGeHQ/8tKPoh12Kiedil5zHuj9ZfPA0NwY9bgwRqkE=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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

env-example/.env.production.example

@@ -16,6 +16,10 @@ NEXT_PUBLIC_API_CONNECT_TIMEOUT=30000
 NEXT_PUBLIC_API_RECEIVE_TIMEOUT=60000
 NEXT_PUBLIC_API_SEND_TIMEOUT=30000
 
+# next-auth v4（Auth.js）—— JWT 签名密钥
+# production 环境独立密钥（**最**重要，**签**发**用**户 session cookie）
+AUTH_SECRET=XypsCWoLCNmwOaq4taIMJHe4+cU9YZBaYN4VMTtmSik=
+
 # 第三方 OAuth
 AUTH_GOOGLE_ID=351948560061-isubggf6eahfii9n0stpf2qu3haralro.apps.googleusercontent.com
 AUTH_GOOGLE_SECRET=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