feat: 强化打包配置与服务安全

backend/database.py

@@ -38,13 +38,13 @@ def _seed_admin():
     """初始化管理员账号（从 .env 配置）"""
     from .models import User
     from .config import ADMIN_USERNAME, ADMIN_PASSWORD
-    import hashlib
+    from .security import hash_password
 
     db = SessionLocal()
     try:
         if not db.query(User).filter(User.username == ADMIN_USERNAME).first():
-            pw_hash = hashlib.sha256(ADMIN_PASSWORD.encode()).hexdigest()
-            db.add(User(id="admin-001", username=ADMIN_USERNAME, password_hash=pw_hash, is_admin=True))
+            db.add(User(id="admin-001", username=ADMIN_USERNAME,
+                        password_hash=hash_password(ADMIN_PASSWORD), is_admin=True))
             db.commit()
     finally:
         db.close()