chore(align): sync Git with running container as authoritative source

One-time alignment to close drift between the running container
(qihu-aiflow / image qihuaiflow:with-deps) and this Git repository.
Container hotfixes previously persisted only via `docker commit` are now
captured in Git so Git becomes the single source of truth.

Backend:
- chat_service.py: accumulated fixes incl. EigenFlux README guidance
- chat_context.py / chat_media.py: URL/web-repo context injection
- api/url_reader.py: NEW SSRF-safe web/README reader (Issue #725)
- skills_admin.py & Skills.tsx: 14-scene capability unification
- pgvector_search.py, orchestrator.py, platform_knowledge.py,
  market.py, admin/models.py: drift sync

Frontend:
- ChatPage.tsx: collapsible AI think/act block (Issue #724)
- MarketPage / EvolutionDashboard / TokenDashboard styling sync

Migrations:
- 018_normalize_marketapp_scene.sql: fixed capability allowlist
  (prevents capability wipe on restart)

Alignment performed 2026-07-23 05:42:47. No deletions; secrets/venv/node_modules/
caches were not touched (tracked-source-only copy).

migrations/018_normalize_marketapp_scene.sql

@@ -1,14 +1,20 @@
--- 018: 将 market_apps.capability 从旧的「AI 技术能力」取值规范为「业务场景」取值
--- 旧的 text/thinking/vision/tool/image/audio/asr/ocr/embedding/rerank/video 已不再使用，
--- 统一置空，后续由 AI 验证 / 导入阶段按业务场景重新归类。
--- 幂等：执行一次后不再有匹配行，可安全每次重启重跑。
-UPDATE market_apps
-SET capability = NULL
-WHERE capability IS NOT NULL
-  AND capability NOT IN (
-    'freelance_content', 'freelance_client', 'freelance_finance',
-    'office_doc', 'office_data', 'office_email', 'office_pm',
-    'edu_prepare', 'edu_grade', 'edu_tutor', 'edu_home',
-    'biz_product', 'biz_service', 'biz_ops',
-    'general_write', 'general_research', 'general_agent'
-  );
+-- 018: 将 market_apps.capability 从旧的「AI 技术能力」取值规范为「业务场景」取值
+-- 旧的 text/thinking/vision/tool/image/audio/asr/ocr/embedding/rerank/video 已不再使用，
+-- 统一置空，后续由 AI 验证 / 导入阶段按业务场景重新归类。
+-- 幂等：执行一次后不再有匹配行，可安全每次重启重跑。
+-- 注意：当前业务场景标准 = 前台「应用市场」14 类 (MARKET_SCENES)：
+--   design, frontend, mobile, backend, qa, search, docs, marketing,
+--   workflow, secops, learning, video, collab, ai
+-- 这些为合法取值，必须保留，不得置空（#707 修复：此前 allowlist 不含 14 类导致重启被清空）。
+UPDATE market_apps
+SET capability = NULL
+WHERE capability IS NOT NULL
+  AND capability NOT IN (
+    'design', 'frontend', 'mobile', 'backend', 'qa', 'search', 'docs', 'marketing',
+    'workflow', 'secops', 'learning', 'video', 'collab', 'ai',
+    'freelance_content', 'freelance_client', 'freelance_finance',
+    'office_doc', 'office_data', 'office_email', 'office_pm',
+    'edu_prepare', 'edu_grade', 'edu_tutor', 'edu_home',
+    'biz_product', 'biz_service', 'biz_ops',
+    'general_write', 'general_research', 'general_agent'
+  );