fix: correct init-db hashPassword call for bcrypt migration

hashPassword now uses bcrypt (single arg), not SHA-256 (password+salt).
The old call silently ignored the salt param but was misleading.

server/scripts/init-db.js

@@ -23,11 +23,10 @@ async function main() {
 
   const [rows] = await conn.execute('SELECT admin_id FROM admin_accounts WHERE username = ?', [config.admin.username])
   if (rows.length === 0) {
-    const salt = randomHex(16)
+    const passwordHash = hashPassword(config.admin.password)
-    const passwordHash = hashPassword(config.admin.password, salt)
     await conn.execute(
       'INSERT INTO admin_accounts (username, password_hash, password_salt, real_name, role, status) VALUES (?, ?, ?, ?, ?, 1)',
-      [config.admin.username, passwordHash, salt, '管理员', 'admin']
+      [config.admin.username, passwordHash, '', '管理员', 'admin']
     )
   }