feat: 账户方向与币种白名单 env 开关（三所）

Per-instance TRADE_DIRECTION / TRADE_SYMBOL_WHITELIST restricts UI and API for manual orders, key monitors, and strategies; includes sync script for deployment profiles.

Co-authored-by: Cursor <cursoragent@cursor.com>

lib/instance/templates/embed_shell.html

@@ -7,7 +7,7 @@
     <link rel="stylesheet" href="/static/instance_theme_early.css?v=4">
     <link rel="stylesheet" href="/static/account_risk_badge.css?v=4">
     <link rel="stylesheet" href="/static/instance_page.css?v=2">
-    <link rel="stylesheet" href="/static/instance_theme.css?v=48">
+    <link rel="stylesheet" href="/static/instance_theme.css?v=49">
     <script src="/static/account_risk_badge.js?v=4"></script>
     <meta name="theme-color" content="#0b0d14">
     <title>{{ exchange_display }} · 加密货币 | 交易监控复盘系统</title>
@@ -28,6 +28,9 @@
         <h1>加密货币｜交易监控 + AI复盘一体化</h1>
         <div class="header-row">
             <div class="exchange-tag">{{ exchange_display }}</div>
+            {% if trade_policy.badge_text %}
+            <span class="trade-policy-badge" title="账户交易限制（.env）">{{ trade_policy.badge_text }}</span>
+            {% endif %}
             <span class="risk-status-badge risk-status-{{ risk_status.status|default('normal') }}" id="account-risk-badge" role="status" title="{{ risk_status.reason|default('', true) }}" data-status-label="{{ risk_status.status_label|default('正常') }}"{% if risk_status.freeze_until_ms %} data-freeze-until-ms="{{ risk_status.freeze_until_ms }}"{% endif %}>{{ risk_status.status_label|default('正常') }}</span>
             <div class="theme-toggle instance-theme-toggle" role="group" aria-label="界面主题">
                 <button type="button" class="theme-toggle-btn is-active" data-theme-value="dark" aria-pressed="true" title="暗色主题">