增加支付逻辑

deploy/ack/go-api.yaml

@@ -42,12 +42,22 @@ spec:
             - secretRef:
                 name: zhinian-go-providers
                 optional: true
+            - secretRef:
+                name: zhinian-go-wechat-pay
+                optional: true
           env:
             - name: DATABASE_URL
               valueFrom:
                 secretKeyRef:
                   name: zhinian-go-db
                   key: DATABASE_URL
+            # Migration credentials stay separate from the least-privilege
+            # application DATABASE_URL above. Never inject this Secret via envFrom.
+            - name: DATABASE_MIGRATION_URL
+              valueFrom:
+                secretKeyRef:
+                  name: zhinian-migration-db
+                  key: DATABASE_URL
             # Go alone creates and verifies the browser session cookie. The
             # static Web workload must never receive this signing secret.
             - name: ZHINIAN_AUTH_SESSION_SECRET
@@ -75,7 +85,8 @@ spec:
               path: /api/health
               port: http
             periodSeconds: 5
-            failureThreshold: 24
+            # 180s migration deadline plus DB/bootstrap and startup headroom.
+            failureThreshold: 60
           readinessProbe:
             httpGet:
               path: /api/ready