fix: cleanup k8s configs, add deploy.sh, remove hardcoded secrets

- Add one-click deploy script (k8s/deploy.sh) for test + prod
- Add startupProbe to backend (60x10s = 10min grace for ML model loading)
- Add configmap.yaml and secret.yaml (envsubst from backend/.env)
- Fix image URLs: add registry.plfai.cn prefix
- Fix frontend: API base URL relative (/api/v1), login-required mode
- Remove hardcoded localhost references from frontend
- Clean broken kustomize overlays
- Add nodeAffinity for backend→k8smaster, frontend→plf-cvm/k8smaster
- Remove dead ReplicaSets and stale pods during deploy

backend/Dockerfile

@@ -23,7 +23,8 @@ RUN uv venv /opt/venv && \
         "networkx>=3.0" \
         "python-dotenv>=1.0.0" \
         "requests>=2.31.0" \
-        "beautifulsoup4>=4.12.0"
+        "beautifulsoup4>=4.12.0" \
+        "python-jose[cryptography]>=3.3.0"
 
 # ===== Stage 2: Runtime =====
 FROM python:3.12-slim