feat: production branch with deploy config for baota panel

- Add deploy/ directory with production env, supervisor, nginx, migration configs
- Include all latest features: admin management, feedback, footer with ICP/beian
- Database: foreign_trade (PostgreSQL), user: foreign_trade
- Frontend: trade.yuzhiran.com, backend proxy via Nginx

backend/app/api/v1/admin.py

@@ -1,3 +1,6 @@
+import uuid
+from typing import Optional
+from datetime import date, datetime
 from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.database import get_db
@@ -26,11 +29,19 @@ async def get_dashboard(
 async def list_users(
     page: int = Query(1, ge=1),
     size: int = Query(20, ge=1, le=100),
+    role: Optional[str] = Query(None),
     _: dict = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
     service = AdminService(db)
-    return await service.list_users(page, size)
+    return await service.list_users(page, size, role)
+
+
+def _validate_uuid(user_id: str):
+    try:
+        uuid.UUID(user_id)
+    except ValueError:
+        raise HTTPException(status_code=400, detail="Invalid user ID format")
 
 
 @router.patch("/users/{target_user_id}/tier")
@@ -40,6 +51,7 @@ async def update_user_tier(
     _: dict = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
+    _validate_uuid(target_user_id)
     service = AdminService(db)
     tier = data.get("tier")
     if tier not in ("free", "pro", "enterprise"):
@@ -56,6 +68,7 @@ async def toggle_user_active(
     _: dict = Depends(require_admin),
     db: AsyncSession = Depends(get_db),
 ):
+    _validate_uuid(target_user_id)
     service = AdminService(db)
     success = await service.toggle_user_active(target_user_id)
     if not success:
@@ -63,6 +76,97 @@ async def toggle_user_active(
     return {"message": "User active status toggled"}
 
 
+@router.patch("/users/{target_user_id}/role")
+async def update_user_role(
+    target_user_id: str,
+    data: dict,
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    _validate_uuid(target_user_id)
+    service = AdminService(db)
+    role = data.get("role")
+    if role not in ("user", "admin"):
+        raise HTTPException(status_code=400, detail="Invalid role. Must be 'user' or 'admin'")
+    result = await service.update_user_role(target_user_id, role)
+    if not result:
+        raise HTTPException(status_code=404, detail="User not found")
+    return result
+
+
+@router.get("/users/search")
+async def search_users(
+    q: str = Query(..., min_length=1),
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    service = AdminService(db)
+    return await service.search_users(q)
+
+
+@router.get("/users/{target_user_id}")
+async def get_user_detail(
+    target_user_id: str,
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    _validate_uuid(target_user_id)
+    service = AdminService(db)
+    result = await service.get_user_detail(target_user_id)
+    if not result:
+        raise HTTPException(status_code=404, detail="User not found")
+    return result
+
+
+@router.get("/usage-stats")
+async def get_usage_stats(
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    service = AdminService(db)
+    return await service.get_usage_stats()
+
+
+@router.get("/logs")
+async def get_logs(
+    page: int = Query(1, ge=1),
+    size: int = Query(50, ge=1, le=200),
+    action: Optional[str] = Query(None),
+    user_id: Optional[str] = Query(None),
+    date_from: Optional[date] = Query(None),
+    date_to: Optional[date] = Query(None),
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    service = AdminService(db)
+    dt_from = datetime.combine(date_from, datetime.min.time()) if date_from else None
+    dt_to = datetime.combine(date_to, datetime.max.time()) if date_to else None
+    return await service.get_logs(page, size, action, user_id, dt_from, dt_to)
+
+
+@router.get("/config")
+async def list_config(
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    service = AdminService(db)
+    return await service.list_config()
+
+
+@router.put("/config/{key}")
+async def update_config(
+    key: str,
+    data: dict,
+    _: dict = Depends(require_admin),
+    db: AsyncSession = Depends(get_db),
+):
+    service = AdminService(db)
+    item = await service.update_config(key, data.get("value"))
+    if not item:
+        raise HTTPException(status_code=404, detail="Config not found")
+    return item
+
+
 @router.get("/health")
 async def system_health(
     db: AsyncSession = Depends(get_db),