feat(h5): unify WeChat OAuth under m.runxian.top path routing

Serve user/shop/partner H5 under /user/, /shop/, /partner/ on a single authorized domain; update nginx, SSL script, and router base paths.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/h5-partner/src/lib/api.ts

@@ -1,3 +1,5 @@
+import { isOnAppPath, toAppPath } from '@dukang/weixin-sdk';
+
 export const apiBase = '/api/v1';
 
 export async function request<T>(clientApp: string, path: string, options: RequestInit = {}): Promise<T> {
@@ -12,8 +14,8 @@ export async function request<T>(clientApp: string, path: string, options: Reque
   const json = await res.json().catch(() => ({ code: res.status, message: '网络异常' }));
   if (res.status === 401 || json.code === 401) {
     clearAuth();
-    if (typeof window !== 'undefined' && !window.location.pathname.startsWith('/login')) {
-      window.location.href = '/login';
+    if (typeof window !== 'undefined' && !isOnAppPath('/login')) {
+      window.location.href = toAppPath('/login');
     }
     throw new Error(json.message || '登录已过期，请重新登录');
   }