feat(server): 试运行部署与运营基线（E13/E14/E17/E19/E20/E21）

- 增加 deploy/trialrun：Docker Compose + env 模板 + runbook + 发布/回滚 checklist

- 新增 DB/文件存储备份恢复脚本（backup/restore）

- 新增 system.users 运营接口：创建/启用禁用/重置密码/分配角色 + 审计

- 新增 seed:trialrun 引导管理员账号（一次性口令）

- 补齐 SIGTERM/SIGINT 优雅停机（关闭 job/HTTP/DB）

scripts/backup-db.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+BACKUP_DIR="${BACKUP_DIR:-$ROOT_DIR/deploy/trialrun/backups}"
+mkdir -p "$BACKUP_DIR"
+
+TS="$(date +%Y%m%d_%H%M%S)"
+OUT_FILE="${OUT_FILE:-$BACKUP_DIR/hyb-oa-db-${TS}.dump}"
+
+if [[ -z "${DATABASE_URL:-}" ]]; then
+  echo "[ERR] DATABASE_URL is required" >&2
+  exit 1
+fi
+
+echo "[INFO] DB backup start: $OUT_FILE"
+
+if command -v pg_dump >/dev/null 2>&1; then
+  pg_dump "$DATABASE_URL" --format=c --no-owner --no-acl --file "$OUT_FILE"
+  echo "[OK] DB backup done (pg_dump): $OUT_FILE"
+  exit 0
+fi
+
+if ! command -v docker >/dev/null 2>&1; then
+  echo "[ERR] pg_dump not found and docker not available" >&2
+  exit 1
+fi
+
+DB_CONTAINER="${DB_CONTAINER:-hyb-oa-trialrun-db}"
+POSTGRES_DB="${POSTGRES_DB:-}"
+POSTGRES_USER="${POSTGRES_USER:-}"
+POSTGRES_PASSWORD="${POSTGRES_PASSWORD:-}"
+
+if [[ -z "$POSTGRES_DB" || -z "$POSTGRES_USER" || -z "$POSTGRES_PASSWORD" ]]; then
+  echo "[ERR] Using docker fallback requires POSTGRES_DB/POSTGRES_USER/POSTGRES_PASSWORD" >&2
+  exit 1
+fi
+
+docker exec -e PGPASSWORD="$POSTGRES_PASSWORD" "$DB_CONTAINER" \
+  pg_dump -U "$POSTGRES_USER" -d "$POSTGRES_DB" --format=c --no-owner --no-acl \
+  >"$OUT_FILE"
+
+echo "[OK] DB backup done (docker exec): $OUT_FILE"
+