feat(h5): unify WeChat OAuth under m.runxian.top path routing

Serve user/shop/partner H5 under /user/, /shop/, /partner/ on a single authorized domain; update nginx, SSL script, and router base paths.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/enable-runxian-dukang-ssl.sh

@@ -1,9 +1,11 @@
 #!/usr/bin/env bash
-# 为杜康 runxian.top 五域名申请 Let's Encrypt 并切换 HTTPS 配置
+# 为杜康 runxian.top 申请 Let's Encrypt 并切换 HTTPS 配置
+# 三端 H5 统一入口 m.runxian.top（微信网页授权单域名）
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 DOMAINS=(
+  m.runxian.top
   user.runxian.top
   shop.runxian.top
   partner.runxian.top
@@ -25,7 +27,8 @@ mkdir -p /var/www/certbot /var/log/nginx/dukang
 
 echo "==> 申请证书..."
 certbot certonly --webroot -w /var/www/certbot \
-  --cert-name user.runxian.top \
+  --cert-name m.runxian.top \
+  -d m.runxian.top \
   -d user.runxian.top \
   -d shop.runxian.top \
   -d partner.runxian.top \
@@ -43,13 +46,14 @@ systemctl reload nginx
 
 echo "==> 验证..."
 for url in \
+  https://m.runxian.top/user/ \
+  https://m.runxian.top/shop/ \
+  https://m.runxian.top/partner/ \
   https://user.runxian.top/ \
-  https://shop.runxian.top/ \
-  https://partner.runxian.top/ \
   https://webadmin.runxian.top/ \
   https://dkapi.runxian.top/api/v1/health; do
   code="$(curl -sf -o /dev/null -w '%{http_code}' "$url" || echo fail)"
   echo "  $url -> $code"
 done
 
-echo "==> runxian.top 杜康域名 HTTPS 已启用"
+echo "==> runxian.top 杜康域名 HTTPS 已启用（H5 统一入口 m.runxian.top）"