加固既有生产部署流程（07-27-yang-jun-reimbursement-readiness）

deploy/trialrun/Dockerfile

@@ -1,10 +1,5 @@
 FROM node:22-alpine AS base
 
-ARG BUILD_SHA=unknown
-ARG VITE_BUILD_SHA=unknown
-ENV BUILD_SHA=$BUILD_SHA
-ENV VITE_BUILD_SHA=$VITE_BUILD_SHA
-
 WORKDIR /app
 
 RUN apk add --no-cache bash curl
@@ -14,6 +9,8 @@ COPY client/package.json client/package-lock.json ./client/
 RUN cd client && npm ci
 
 FROM client_deps AS client_build
+ARG VITE_BUILD_SHA=unknown
+ENV VITE_BUILD_SHA=$VITE_BUILD_SHA
 COPY client ./client
 RUN cd client && npm run build
 
@@ -23,6 +20,8 @@ COPY server/prisma ./server/prisma
 RUN cd server && npm ci
 
 FROM server_deps AS server_build
+ARG BUILD_SHA=unknown
+ENV BUILD_SHA=$BUILD_SHA
 COPY server ./server
 COPY scripts ./scripts
 COPY --from=client_build /app/client/dist ./client/dist