chore(deploy): keep docker env in .env.deploy, restore .env for development

Co-Authored-By: Claude Fable 5.1 <[email protected]>

docs/runbook/deploy.md

@@ -29,10 +29,10 @@ APP_VERSION=v0.1.0 docker compose build                         # 版本号写
 
 ```sh
 mkdir -p /opt/umt && cd /opt/umt                                # 部署目录(放 docker-compose.yml 与 .env)
-cp <仓库>/docker/compose.env.example .env
+cp <仓库>/docker/compose.env.example .env.deploy   # 部署配置独立于开发用 .env
 sed -i "s/^SECRET_MASTER_KEY=.*/SECRET_MASTER_KEY=$(openssl rand -hex 32)/" .env
 sed -i "s/^POSTGRES_PASSWORD=.*/POSTGRES_PASSWORD=$(openssl rand -hex 16)/" .env
-docker compose up -d --build
+docker compose --env-file .env.deploy up -d --build
 docker compose ps                                               # app 变成 healthy 即可访问
 curl -s localhost:4380/api/v1/health
 ```
@@ -116,7 +116,7 @@ docker compose logs app | grep 'setup token'
 ```sh
 cd <仓库> && git pull
 docker compose exec app umt backup                              # 升级前先备份
-docker compose up -d --build app                                # 重建镜像并替换容器;启动时自动迁移
+docker compose --env-file .env.deploy up -d --build app                                # 重建镜像并替换容器;启动时自动迁移
 docker compose ps && docker compose logs --tail=50 app
 ```