feat: 增加演示身份下拉并保留令牌权限边界

deploy/aliyun.env.example

@@ -9,6 +9,9 @@ DEEPSEEK_MODEL=deepseek-chat
 DEEPSEEK_BASE_URL=https://api.deepseek.com
 # For the gateway tested in the chat repair use disabled; otherwise verify support.
 CHAT_THINKING_MODE=
+# Temporary business-workbench role dropdown. Keep disabled for production data.
+XINGBANG_DEMO_ROLE_LOGIN=0
+XINGBANG_DEMO_PROJECTS=DEMO-A,DEMO-B,DEMO-C,LAB-001,XB-2026-001
 
 ERP_DB_HOST=
 ERP_DB_PORT=5432

deploy/docker-compose.aliyun.yml

@@ -11,6 +11,8 @@ services:
       DEEPSEEK_MODEL: ${DEEPSEEK_MODEL:-deepseek-chat}
       DEEPSEEK_BASE_URL: ${DEEPSEEK_BASE_URL:-https://api.deepseek.com}
       CHAT_THINKING_MODE: ${CHAT_THINKING_MODE:-}
+      XINGBANG_DEMO_ROLE_LOGIN: ${XINGBANG_DEMO_ROLE_LOGIN:-0}
+      XINGBANG_DEMO_PROJECTS: ${XINGBANG_DEMO_PROJECTS:-DEMO-A,DEMO-B,DEMO-C,LAB-001,XB-2026-001}
       ERP_DB_HOST: ${ERP_DB_HOST:-}
       ERP_DB_PORT: ${ERP_DB_PORT:-5432}
       ERP_DB_NAME: ${ERP_DB_NAME:-}