Release engineering settled, first production deployment

  • Product repo split: server / website / webadmin / me / share / sdk, each with its own responsibilities.
  • The historical production domain was once unified as auth.pandalabs.cc; the current production domain is auth.pandalabs.cn, with the four services bound on loopback behind a Caddy same-domain reverse proxy.
  • Release discipline: image tags are each repo’s HEAD short SHA, a missing pin fails closed, and health polling rolls back automatically on failure.