优化

src/shared/database/init_db.py

@@ -118,6 +118,13 @@ async def init_roles(session, perm_map):
 
 async def create_admin_user(session):
     """创建默认管理员"""
+    # compose 不再给 ADMIN_PASSWORD 弱默认（D14）：缺失时显式失败，
+    # 而不是静默创建空口令管理员
+    if not settings.ADMIN_PASSWORD:
+        raise RuntimeError(
+            "ADMIN_PASSWORD 未配置：请在 .env 中设置管理员初始密码后重启"
+        )
+
     result = await session.execute(select(User).where(User.username == settings.ADMIN_USERNAME))
     existing_admin = result.scalar_one_or_none()
     
@@ -150,7 +157,13 @@ async def init_database(keep_connected: bool = True):
     """初始化数据库"""
     try:
         await db_manager.connect()
-        await _run_alembic_migrations()
+        if settings.AUTO_MIGRATE:
+            await _run_alembic_migrations()
+        else:
+            logger.info(
+                "AUTO_MIGRATE=false：跳过启动期 alembic 迁移，"
+                "schema 由部署流程单点执行（alembic CLI 或 python -m shared.database.init_db）"
+            )
         
         async with db_manager.session() as session:
             perm_map = await init_permissions(session)