feat(h5): unify WeChat OAuth under m.runxian.top path routing

Serve user/shop/partner H5 under /user/, /shop/, /partner/ on a single authorized domain; update nginx, SSL script, and router base paths.

Co-authored-by: Cursor <cursoragent@cursor.com>

apps/h5-user/src/lib/pay-wechat.ts

@@ -1,5 +1,6 @@
 import type { ClientRuntimeConfig, WechatLoginResult } from '@dukang/shared-types';
 import { isWxAuthorizeEnabled } from '@dukang/shared-types';
+import { toAppPath } from '@dukang/weixin-sdk';
 import { isWechatEnv, weixinSdk } from './weixin';
 import { request, saveSession, type UserProfile } from './api';
 
@@ -48,5 +49,5 @@ export async function authorizeWechatForPay(): Promise<WechatLoginResult | void>
 }
 
 export function buildLoginReturnUrl(pathname: string, search: string) {
-  return `/login?return=${encodeURIComponent(`${pathname}${search}`)}`;
+  return `${toAppPath('/login')}?return=${encodeURIComponent(`${pathname}${search}`)}`;
 }