docs: update project docs and clean up redundant files

- PROGRESS.md: update to 2026-05-29 with security hardening (T-005),
  4-frontend architecture, AI provider refactoring, discovery features,
  landing page/referral/quota, desktop layout, admin AI management
- AGENTS.md: add AI provider list (Alibaba/NVIDIA, removed Claude/DeepL/Local),
  DB-driven config, CSRF/rate-limit/CORS notes, admin_ai reload quirk
- .env.example: sync with actual config, replace deprecated providers
  with current Sensenova/OpencodeGo/NVIDIA/Spark/Alibaba
- docs/PROJECT_STATUS.md: archive (fully superseded by PROGRESS.md)
- Remove generated JS files (_bing_search.js, _batch_search.js)
- Remove empty directories (data/corpus, data/models)
- Remove backend/.coverage (test artifact)
- Fix services/.gitignore to cover _bing_search.js
- Include pending AI provider DB admin feature (admin_ai, AIProvider model,
  AIProviders.vue, migration) and T-008 test report

backend/.env.example

@@ -15,14 +15,37 @@ REDIS_URL=redis://localhost:6379/0
 CELERY_BROKER_URL=redis://localhost:6379/1
 CELERY_RESULT_BACKEND=redis://localhost:6379/2
 
-# AI 提供商（至少配置一个）
-OPENAI_API_KEY=
-ANTHROPIC_API_KEY=
-DEEPL_API_KEY=
+# AI 提供商（至少配置一个以启用 AI 功能）
+# 主提供商: Sensenova (商汤)
+SENSENOVA_API_KEY=
+SENSENOVA_BASE_URL=https://token.sensenova.cn/v1
+SENSENOVA_MODEL=deepseek-v4-flash
 
-# 本地模型（可选）
-LOCAL_MODEL_ENABLED=false
-LOCAL_MODEL_URL=http://localhost:8001
+# Fallback: OpencodeGo
+OPENCODE_GO_API_KEY=
+OPENCODE_GO_BASE_URL=https://opencode.ai/zen/go/v1
+OPENCODE_GO_MODEL=minimax-m2.7
+
+# Fallback: NVIDIA
+NVIDIA_API_KEY=
+NVIDIA_BASE_URL=https://integrate.api.nvidia.com/v1
+NVIDIA_MODEL=stepfun-ai/step-3.5-flash
+
+# 翻译专用: 阿里机器翻译 (Alibaba MT)
+ALIBABA_ACCESS_KEY_ID=
+ALIBABA_ACCESS_KEY_SECRET=
+
+# 讯飞星火 (Spark)
+IFLYTEK_API_KEY=
+IFLYTEK_API_BASE=https://maas-api.cn-huabei-1.xf-yun.com/v2
+IFLYTEK_MODEL=astron-code-latest
+
+# 以下提供商已移除（历史遗留）:
+# OPENAI_API_KEY, ANTHROPIC_API_KEY, DEEPL_API_KEY, LOCAL_MODEL_ENABLED
+
+# Google Custom Search (客户挖掘)
+GOOGLE_API_KEY=
+GOOGLE_CSE_ID=
 
 # WhatsApp Cloud API
 WHATSAPP_API_TOKEN=
@@ -32,11 +55,15 @@ WHATSAPP_WEBHOOK_VERIFY_TOKEN=
 # 微信小程序
 WECHAT_APP_ID=
 WECHAT_APP_SECRET=
+WECHAT_PUSH_TEMPLATE_ID=
+
+# 微信支付
 WECHAT_PAY_MCH_ID=
 WECHAT_PAY_API_KEY=
 WECHAT_PAY_SERIAL_NO=
 WECHAT_PAY_CERT_DIR=./certs
 WECHAT_PAY_NOTIFY_URL=https://your-domain.com/api/v1/payment/notify
+WECHAT_PAY_API_BASE=https://api.mch.weixin.qq.com
 
 # 汇率 API（免费层即可）
 EXCHANGE_RATE_API_KEY=
@@ -50,9 +77,10 @@ SENTRY_DSN=
 DEBUG=true
 
 # URL
-FRONTEND_URL=http://localhost:3000
+FRONTEND_URL=http://localhost:5173
 BACKEND_URL=http://localhost:8000
 
-# Security (CSRF/CORS) - CSRF protection is enabled by default
+# Security (CSRF/CORS)
+# CSRF protection is enabled by default
 # Frontend must send X-CSRF-Token header with state-changing requests
 # The token is provided via csrf_token cookie and X-CSRF-Token response header