Task: Integrate authenticated SSR fix into main

Identity

Integrate completed feature commit 498c2fa (20260816-fix-authenticated-ssr-6c3f8a21) into main without mixing unrelated ready or planning tasks.
Reconcile canonical project memory with the now-implemented Next.js SSR-to-Go identity boundary and database-free production Web workload.
Re-run repository and project-document gates, complete read-only review, and advance the reviewed integration commit to main.

Use the serialized Integration Gate and this dedicated worktree; do not mutate the occupied main worktree before a separately owned final fast-forward step.
Integrate only the authenticated SSR fix and necessary canonical-memory reconciliation; the source task record remains read-only in this task baseline.
Preserve accepted ADR-003 and DEP-001 semantics: production Next.js serves pages/SSR and calls Go over internal HTTP; Go owns database-backed authorization and the Web workload receives no database credentials.
Treat the diagnosis promotion candidate as satisfied by the public-seam regression suite and retain a durable deployment commitment for authenticated SSR smoke testing.
Do not merge the unrelated provider-settings or other ready task branches.

Completed feature commit 498c2fa is the verified baseline of this Integration Gate; its source task record remains unchanged.
The user confirmed that https://nianxxaigc.nianxx.cn is the production environment and that the currently running revision is the first deployment. Canonical memory is therefore being reconciled as a live production remediation, not as a future first deployment.
Canonical current state, task history, system overview, module map, data flow, and commitments now describe the implemented production SSR-to-Go identity bridge, database-free Web workload, local direct-store fallback, and required authenticated /create rollout smoke test.
No unrelated ready/planning task branch was merged. Reviewed integration commit ca12cc8 was fast-forwarded into the local main branch from b26f967; no remote push or live deployment was performed.

Source feature final sol_reviewer: PASS for Standards and Spec.
cmd /c npm.cmd test — 58 files and 183 tests passed on commit 498c2fa in this integration worktree.
cmd /c npx.cmd tsc --noEmit --incremental false — passed.
cmd /c npm.cmd run deploy:check — ACK manifest assertions passed (9 files).
cmd /c npm.cmd run build — Next.js 15.5.18 production build passed; /create remains dynamically server-rendered.
Canonical-memory reconciliation ran git diff --check successfully and touched only the six authorized canonical files.
uv run python .../check_project_docs.py — passed in the correctly based integration worktree.
uv run python .../check_doc_drift.py --task-id 20260816-integrate-auth-ssr-9d7e4c2a — passed; only this integration task record and authorized canonical documents changed relative to 498c2fa.
Final read-only integration review — PASS for Standards and Spec with zero findings.
git merge --ff-only ca12cc8 in the clean local main worktree — passed; the reviewed fix and canonical-memory reconciliation were integrated linearly.

Build and publish the updated Web image, apply the checked-in ACK configuration, and complete the open authenticated /create smoke-test commitment before declaring the production remediation complete.

None. This integration applies the already accepted ADR-003/DEP-001 boundary and records the remaining deployment verification obligation.