chore(工作区): 全量入库 + 补齐 .gitignore（以工作区为准）

- 变更规模：新增 514 / 修改 62 / 重命名 155 / 删除 4（归档重组与文档轮次）
- .gitignore 修：`归档/**/db-cwd归一-备份-*/` —— 原规则写绝对层级（归档/db-cwd归一-…），
  目录搬进 归档/配置与备份/ 后**静默失效**，43 MB 的 DB 备份又变成未跟踪
- .gitignore 补：嵌套 git 内部数据（归档/内嵌git-20261008/、归档/skills-git-旧线-20261007/dotgit-原样移出/）
- .gitignore 补：运行态与部署副本（.workbuddy/collab/、.workbuddy/tools/、.workbuddy/.load-pending、.workbuddy/tmp-*）
- .gitignore 补：备份件（*.bak-*）
- 未跟踪文件从 2190 降到 890（其余为 归档/ 归档件与 .workbuddy/memory/ 知识文件，按口径入库）

归档/迁移/域名迁移_ai1net_20260919/recon47c.sh

@@ -0,0 +1,29 @@
+set +e
+C=/www/server/panel/vhost/cert
+echo "=== [B2] 证书目录实际文件 ==="
+ls -la "$C/alotbuy.com/" 2>/dev/null | head -12
+echo "--- 证书信息（取第一个 pem） ---"
+for f in "$C/alotbuy.com"/*.pem; do [ -f "$f" ] && { echo "FILE: $f"; openssl x509 -in "$f" -noout -subject -issuer -dates 2>/dev/null; openssl x509 -in "$f" -noout -ext subjectAltName 2>/dev/null | tail -3; break; }; done
+echo "=== [A2] alotbuy.com.conf 的 443 段 ==="
+awk '/listen 443/,0' /www/server/panel/vhost/nginx/alotbuy.com.conf 2>/dev/null | grep -vE "set_real_ip_from|^$" | head -45
+echo "=== [C2] 活动 lib/web 里 alotbuy 具体行 ==="
+grep -rn "alotbuy" /opt/dshs/lib /opt/dshs/web 2>/dev/null | head -12
+grep -n "alotbuy" /opt/dshs/package.json 2>/dev/null | head -4
+echo "=== [D] ai1net 命中 ==="
+grep -rl "ai1net" /opt/dshs 2>/dev/null | head -8
+echo "=== [E] /etc/dshs.env 全部键名（只报键，不报值） ==="
+grep -oE "^[A-Za-z_][A-Za-z0-9_]*" /etc/dshs.env 2>/dev/null | sort -u | tr '\n' ' ' | head -c 1200
+echo
+grep -inE "domain|origin|portal|cookie|url" /etc/dshs.env 2>/dev/null | sed 's/=.*/=<值已隐藏>/' | head -12
+echo "=== [F] BT DNS 凭据存在性 ==="
+for p in /www/server/panel/data/dns_accounts.json /root/.acme.sh/account.conf /www/server/panel/config/panel.json; do
+  [ -f "$p" ] && echo "存在: $p ($(wc -c < "$p") B)" || echo "不存在: $p"
+done
+echo "=== [G] relay-direct.conf server_name ==="
+grep -nE "server_name|listen|proxy_pass" /www/server/panel/vhost/nginx/relay-direct.conf 2>/dev/null | head -12
+echo "=== [H] dsh.alotbuy.com.conf 是否仍在生效 ==="
+grep -nE "server_name|listen|proxy_pass|root " /www/server/panel/vhost/nginx/dsh.alotbuy.com.conf 2>/dev/null | head -14
+echo "=== [I] nginx -T 里 alotbuy 出现次数 ==="
+nginx -T 2>/dev/null | grep -c "alotbuy"
+echo "=== [J] 80/443 监听 ==="
+ss -lntp 2>/dev/null | grep -E ":443 |:80 " | head -6