feat: production readiness — feature gaps + config hardening

Miniprogram:
- Add BLE reconnect button on home page when disconnected
- Add loading states to index, profile, subscribe-plans pages
- Add profile editing (avatar + nickname) with COS upload
- Enable pull-to-refresh on history page
- Fix auto-scan self.options → self.data inconsistency
- Add console.error to silent catch blocks
- Gate 'Simple Peripheral' BLE scan behind __DEV__ flag
- Add production config comment to env.js

Admin console:
- Add empty state '暂无数据' to all 5 list views
- Replace plain text plan input with select dropdown
- Add type="date" to record date filters
- Add production config comment

Server:
- CORS origin restricted in production (env CORS_ORIGIN)
- DB pool size configurable via DB_POOL_SIZE env var
- .env.example updated with WeChat Pay + production fields

miniprogram/services/ble/connection.js

@@ -1,6 +1,7 @@
 // BLE connection: scan, connect, disconnect, reconnect logic
 
 var protocol = require('./protocol')
+var devConfig = require('../../config/env')
 var SERVICE = protocol.SERVICE
 var CHAR = protocol.CHAR
 
@@ -237,9 +238,13 @@ function startScan(callbacks) {
               var d = devices[i]
               var name = (d.name || '').toUpperCase()
               var localName = (d.localName || '').toUpperCase()
-              if (name.indexOf('HOX') !== -1 || localName.indexOf('HOX') !== -1 ||
-                  name.indexOf('LIGHTMASK') !== -1 || localName.indexOf('LIGHTMASK') !== -1 ||
-                  name.indexOf('SIMPLE PERIPHERAL') !== -1 || localName.indexOf('SIMPLE PERIPHERAL') !== -1) {
+              var matched = name.indexOf('HOX') !== -1 || localName.indexOf('HOX') !== -1 ||
+                  name.indexOf('LIGHTMASK') !== -1 || localName.indexOf('LIGHTMASK') !== -1
+              // Dev board name - only match in dev mode
+              if (!matched && devConfig.__DEV__) {
+                matched = name.indexOf('SIMPLE PERIPHERAL') !== -1 || localName.indexOf('SIMPLE PERIPHERAL') !== -1
+              }
+              if (matched) {
                 wx.stopBluetoothDevicesDiscovery({})
                 if (callbacks.onFound) callbacks.onFound(d)
                 connect(d.deviceId, callbacks)