feat: add secure invitation and reset links

docker-compose.yml

@@ -1,8 +1,6 @@
 services:
   pipeline-lifetime:
-    build:
-      context: .
-    image: pipeline-lifetime:latest
+    image: pipeline-lifetime:20260805.1
     container_name: pipeline-lifetime
     restart: unless-stopped
     environment:
@@ -10,19 +8,19 @@ services:
       DEBUG: ${DEBUG:-false}
       SECRET_KEY: ${SECRET_KEY:?Set SECRET_KEY in .env}
       ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
-      ADMIN_PASSWORD: ${ADMIN_PASSWORD:?Set ADMIN_PASSWORD in .env}
-      ADMIN_EMAIL: ${ADMIN_EMAIL:?Set ADMIN_EMAIL in .env}
-      DATABASE_URL: ${DATABASE_URL:-sqlite:////app/data/pipe_survival_0331.db}
+      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-}
+      ADMIN_EMAIL: ${ADMIN_EMAIL:-}
+      DATABASE_URL: ${DATABASE_URL:-sqlite:////app/data/pipe_survival.db}
       APP_TIMEZONE: ${APP_TIMEZONE:-Asia/Shanghai}
       MAX_UPLOAD_BYTES: ${MAX_UPLOAD_BYTES:-16777216}
       FUSION_MODEL_CORE_DIR: ${FUSION_MODEL_CORE_DIR:-/app/model_core}
       ALLOW_REGISTRATION: ${ALLOW_REGISTRATION:-false}
-      PASSWORD_RESET_TOKEN_MINUTES: ${PASSWORD_RESET_TOKEN_MINUTES:-30}
       RESEND_API_KEY: ${RESEND_API_KEY:-}
       RESEND_FROM_EMAIL: ${RESEND_FROM_EMAIL:-}
       EMAIL_CODE_MINUTES: ${EMAIL_CODE_MINUTES:-10}
       EMAIL_CODE_RESEND_SECONDS: ${EMAIL_CODE_RESEND_SECONDS:-60}
       EMAIL_CODE_MAX_ATTEMPTS: ${EMAIL_CODE_MAX_ATTEMPTS:-5}
+      PASSWORD_RESET_TOKEN_MINUTES: ${PASSWORD_RESET_TOKEN_MINUTES:-10}
       FRESH_AUTH_MINUTES: ${FRESH_AUTH_MINUTES:-5}
       TRUSTED_DEVICE_DAYS: ${TRUSTED_DEVICE_DAYS:-30}
       SESSION_COOKIE_SECURE: ${SESSION_COOKIE_SECURE:-true}
@@ -32,4 +30,3 @@ services:
       - ./data:/app/data
       - ./data/uploads:/app/uploads
       - ./data/images:/app/static/images
-      - ./example.xlsx:/app/example.xlsx:ro