fix: keep runtime state out of backend images

backend/tests/architecture-tests.js

@@ -86,6 +86,13 @@ test('生产部署统一使用 Vite dist 且不会删除 lock 文件', () => {
   assert.ok(nginxConfig.includes('alias /runtime/downloads/;'));
 });
 
+test('Docker 构建上下文排除依赖、环境配置和运行时数据', () => {
+  const dockerIgnore = fs.readFileSync(path.join(projectRoot, 'backend', '.dockerignore'), 'utf8');
+  for (const requiredEntry of ['node_modules', '.env', 'data/*', 'storage/*']) {
+    assert.ok(dockerIgnore.split(/\r?\n/).includes(requiredEntry), requiredEntry);
+  }
+});
+
 test('install.sh 生成的 Nginx server 块花括号平衡', () => {
   const installer = fs.readFileSync(path.join(projectRoot, 'install.sh'), 'utf8');
   const templates = [...installer.matchAll(/cat > .*?<< EOF\r?\n([\s\S]*?)\r?\nEOF/g)]