production runtime and mock removal

deploy/ack/secrets.example.yaml

@@ -1,6 +1,6 @@
 # Example only. Replace every placeholder and keep the populated file out of Git.
-# Provider, OSS, public API, and webhook secrets are optional add-ons and are
-# intentionally not injected by the minimal production Deployment.
+# Provider credentials are required by the production Go API. OSS, public API,
+# and webhook secrets can be added to the same Secret or injected separately.
 apiVersion: v1
 kind: Secret
 metadata:
@@ -24,6 +24,21 @@ stringData:
 ---
 apiVersion: v1
 kind: Secret
+metadata:
+  name: zhinian-go-providers
+  namespace: zhinian
+type: Opaque
+stringData:
+  # The Go API refuses to start in PostgreSQL production mode when any of the
+  # four selectable real providers is missing its credentials.
+  VOLCENGINE_ACCESS_KEY_ID: REPLACE_WITH_VOLCENGINE_ACCESS_KEY_ID
+  VOLCENGINE_SECRET_ACCESS_KEY: REPLACE_WITH_VOLCENGINE_SECRET_ACCESS_KEY
+  EVOLINK_API_KEY: REPLACE_WITH_EVOLINK_API_KEY
+  BAILIAN_API_KEY: REPLACE_WITH_BAILIAN_API_KEY
+  SEEDANCE_API_KEY: REPLACE_WITH_SEEDANCE_API_KEY
+---
+apiVersion: v1
+kind: Secret
 metadata:
   name: zhinian-go-db
   namespace: zhinian