Add system settings, one-click deploy, and simplify embed UI.

Remove Gate scout auto-seeding and the manual hub login button while keeping Gate login and instance SSO. Add password change and database backup/restore, plus deploy scripts with env auto-generation.

Co-authored-by: Cursor <cursoragent@cursor.com>

templates/admin_settings.html

@@ -0,0 +1,90 @@
+{% extends "base.html" %}
+{% block title %}系统设置 · 本地导航{% endblock %}
+{% block body %}
+<header class="topbar">
+  <h1>系统设置</h1>
+  <nav>
+    <a href="{{ url_for('index') }}">返回导航</a>
+    <a href="{{ url_for('admin_groups') }}">分组管理</a>
+    <a href="{{ url_for('admin_services') }}">服务管理</a>
+    <a href="{{ url_for('logout') }}">退出</a>
+  </nav>
+</header>
+<div class="page-wrap">
+  {% with messages = get_flashed_messages(with_categories=true) %}
+  {% if messages %}
+  <div class="flash-wrap">
+    {% for cat, msg in messages %}
+    <div class="flash {{ cat }}">{{ msg }}</div>
+    {% endfor %}
+  </div>
+  {% endif %}
+  {% endwith %}
+
+  <section class="settings-section">
+    <h2>账户安全</h2>
+    <p class="hint">当前用户：<strong>{{ current_user.username }}</strong></p>
+    <form method="post" novalidate>
+      {{ pwd_form.hidden_tag() }}
+      <div class="form-row">
+        {{ pwd_form.current_password.label }}
+        {{ pwd_form.current_password() }}
+        {% if pwd_form.current_password.errors %}
+        <div class="errors">{{ pwd_form.current_password.errors[0] }}</div>
+        {% endif %}
+      </div>
+      <div class="form-row">
+        {{ pwd_form.new_password.label }}
+        {{ pwd_form.new_password() }}
+        {% if pwd_form.new_password.errors %}
+        <div class="errors">{{ pwd_form.new_password.errors[0] }}</div>
+        {% endif %}
+      </div>
+      <div class="form-row">
+        {{ pwd_form.confirm_password.label }}
+        {{ pwd_form.confirm_password() }}
+        {% if pwd_form.confirm_password.errors %}
+        <div class="errors">{{ pwd_form.confirm_password.errors[0] }}</div>
+        {% endif %}
+      </div>
+      <div class="toolbar" style="margin-top: 1rem">
+        {{ pwd_form.submit(class="btn btn-primary", style="width: auto") }}
+      </div>
+    </form>
+  </section>
+
+  <section class="settings-section">
+    <h2>数据备份与恢复</h2>
+    <p class="hint">
+      数据库文件：<code>{{ db_path }}</code>
+      {% if db_size %}
+      （约 {{ "%.1f"|format(db_size / 1024) }} KB）
+      {% else %}
+      （文件不存在或为空）
+      {% endif %}
+    </p>
+    <div class="toolbar">
+      <a class="btn btn-secondary" href="{{ url_for('admin_settings_backup') }}" style="width: auto">一键备份</a>
+    </div>
+    <form
+      method="post"
+      enctype="multipart/form-data"
+      novalidate
+      onsubmit="return confirm('恢复将覆盖当前数据库，是否继续？恢复前会自动生成 .bak 备份。');"
+    >
+      {{ restore_form.hidden_tag() }}
+      <div class="form-row">
+        {{ restore_form.backup_file.label }}
+        {{ restore_form.backup_file() }}
+        {% if restore_form.backup_file.errors %}
+        <div class="errors">{{ restore_form.backup_file.errors[0] }}</div>
+        {% endif %}
+      </div>
+      <p class="hint">恢复完成后请重启 LocalNav 服务。</p>
+      <div class="toolbar" style="margin-top: 1rem">
+        {{ restore_form.submit(class="btn btn-secondary", style="width: auto") }}
+      </div>
+    </form>
+  </section>
+</div>
+{% endblock %}