Refine desktop setup and remove bundled app center apps

.env.example

@@ -1,41 +1,45 @@
-# ClawX Environment Variables
+# Zhinian Desktop Environment Template
+#
+# Copy this file to `.env.local` for local development only.
+# Do not commit `.env.local` or any real API keys, tokens, client secrets,
+# certificates, or customer-specific service endpoints.
 
 # OpenClaw Gateway Configuration
 OPENCLAW_GATEWAY_PORT=18789
 
 # Development Configuration
-VITE_DEV_SERVER_PORT=5173
+VITE_DEV_SERVER_PORT=5188
 
 # Zhinian service connection
-# Required for real login. The desktop app no longer falls back to demo login
-# unless YINIAN_CONTROL_PLANE_MODE=mock is explicitly set.
-YINIAN_API_BASE_URL=https://onefeel.brother7.cn/ingress
-YINIAN_AUTH_CLIENT_ID=customPC
+# Required for real customer login. Get these values from the deployment owner.
+YINIAN_API_BASE_URL=https://your-zhinian-api.example/ingress
+YINIAN_AUTH_CLIENT_ID=your-client-id
 YINIAN_AUTH_SCOPE=server
-# Optional, depending on your server OAuth client settings:
-# YINIAN_AUTH_CLIENT_SECRET=customPC
-# YINIAN_AUTH_BASIC=Basic Y3VzdG9tUEM6Y3VzdG9tUEM=
+# Optional, depending on your server OAuth client settings. Leave blank unless
+# the deployment owner provides values through a private channel.
+# YINIAN_AUTH_CLIENT_SECRET=
+# YINIAN_AUTH_BASIC=
 # Optional enterprise-space/application endpoints. Template variables are supported:
 # {workspaceId}, {workspace_id}, {hotelId}, {hotel_id}, {tenantId}, {tenant_id}
 # YINIAN_CONFIG_SYNC_PATH=/config/sync
 # YINIAN_SKILLS_MANIFEST_PATH=/skills/manifest
-# Optional OpenClaw cloud sync plugin service. Defaults to YINIAN_API_BASE_URL
-# with a trailing /ingress removed, then https://onefeel.brother7.cn.
-# YINIAN_CLOUD_SYNC_SERVER_URL=https://onefeel.brother7.cn
+# Optional OpenClaw cloud sync plugin service.
+# YINIAN_CLOUD_SYNC_SERVER_URL=https://your-zhinian-api.example
 # YINIAN_CLOUD_SYNC_ENABLED=1
 
-# Local demo mode, for visual QA or offline demos only.
+# Local demo mode, for visual QA or offline demos only. This avoids requiring
+# a real service endpoint while testing the desktop shell.
 # YINIAN_CONTROL_PLANE_MODE=mock
 
 # Release Configuration (CI/CD)
-# Apple Developer Credentials
-APPLE_ID=your@email.com
-APPLE_APP_SPECIFIC_PASSWORD=xxxx-xxxx-xxxx-xxxx
-APPLE_TEAM_ID=XXXXXXXXXX
+# Apple Developer Credentials. Keep real values in CI secrets or local shell.
+APPLE_ID=
+APPLE_APP_SPECIFIC_PASSWORD=
+APPLE_TEAM_ID=
 
-# Code Signing Certificate
-CSC_LINK=path/to/certificate.p12
-CSC_KEY_PASSWORD=certificate_password
+# Code Signing Certificate. Keep real files and passwords out of git.
+CSC_LINK=
+CSC_KEY_PASSWORD=
 
-# GitHub Token for releases
-GH_TOKEN=github_personal_access_token
+# Release token. Keep real values in CI secrets or local shell.
+GH_TOKEN=