feat(admin): add ephemeral staging DB, read-only posts overview, and dynamic search

- Implement ephemeral staging mode (APP_ENV=staging) to isolate test/dev DB writes in /tmp
- Add read-only posts management dashboard under /guanli/posts with live links and comment counters
- Add hot re-indexing endpoint (/guanli/reindex) to refresh Markdown without restarting server
- Replace static recommended search config with dynamic frequency-based trending searches
- Remove early scaffold mockup file (dropbox/zh.md) and clean legacy mock test queries
- Add native Makefile with dev, dev-persistent, test, lint, and docker targets
- Update test suite and documentation for development workflows

test/test.js

@@ -21,15 +21,15 @@ async function runTests() {
   const posts = contentService.getAllPosts();
   assert(posts.length >= 3, `Expected at least 3 posts, got ${posts.length}`);
 
-  const dropboxPost = contentService.getPost('using-gemini-cli-and-mcp-server-to-organize-my-dropbox');
-  assert(dropboxPost, 'Default dropbox post must exist');
-  assert.strictEqual(dropboxPost.lang, 'en');
-  assert(dropboxPost.cover, 'Dropbox post must have cover image');
-  assert(dropboxPost.availableLanguages.includes('zh'), 'Dropbox post must report zh translation available');
+  const bilingualPost = contentService.getPost('ai-can-change-coding-for-kids');
+  assert(bilingualPost, 'Default bilingual post must exist');
+  assert.strictEqual(bilingualPost.lang, 'en');
+  assert(bilingualPost.cover, 'Post must have cover image');
+  assert(bilingualPost.availableLanguages.includes('zh'), 'Post must report zh translation available');
 
-  const dropboxZh = contentService.getPost('using-gemini-cli-and-mcp-server-to-organize-my-dropbox', 'zh');
-  assert(dropboxZh, 'Chinese variant of dropbox post must exist');
-  assert.strictEqual(dropboxZh.lang, 'zh');
+  const bilingualZh = contentService.getPost('ai-can-change-coding-for-kids', 'zh');
+  assert(bilingualZh, 'Chinese variant of post must exist');
+  assert.strictEqual(bilingualZh.lang, 'zh');
   console.log('  ✓ Content service & bilingual variants verified.');
 
   // Test 2: Unified SQLite Database Sync & FTS5
@@ -50,15 +50,16 @@ async function runTests() {
 
   // Test 3: Structured Schema Search Engine & Deduplication
   console.log('[Test 3] Testing Structured Schema Search Engine & Deduplication...');
-  const complexQuery = 'tag:k8s "container image" category:tech';
+  const complexQuery = 'category:tech "strace"';
   const res1 = searchEngine.search(complexQuery);
   assert.strictEqual(res1.total, 1, `Query '${complexQuery}' should deduplicate to exactly 1 post, got ${res1.total}`);
-  assert.strictEqual(res1.results[0].post.slug, 'using-gemini-cli-and-mcp-server-to-organize-my-dropbox');
+  assert.strictEqual(res1.results[0].post.slug, 'troubleshooting-gke-pods-in-crashloopbackoff-how-to-start-with-strace');
   assert(res1.results[0].snippet.includes('<mark>'), 'Snippet must highlight matched terms');
 
   // Verify search logging to SQLite
-  const topRecs = dbService.getTopSearchRecommendations(5);
-  assert(topRecs.length >= 1, 'Search query must be recorded in SQLite search_logs / recommendations');
+  dbService.logSearch(complexQuery, 1);
+  const topRecs = dbService.getTopSearchQueries(5);
+  assert(topRecs.length >= 1, 'Search query must be recorded in SQLite search_logs');
   console.log(`  ✓ Search engine verified. Query logged in SQLite recommendations.`);
 
   // Test 4: WordPress-Grade Comment Moderation & Author Whitelist
@@ -227,16 +228,23 @@ async function runTests() {
   assert(!robotsRes.body.includes('/guanli'), 'robots.txt must NOT disclose /guanli to scanners');
   assert(robotsRes.body.includes('Disallow: /admin/'), 'robots.txt must Disallow /admin/');
 
-  // Verify Batch Comment Moderation Endpoint (/guanli/comments/batch)
-  const batchRes = await request(`/guanli/comments/batch?key=${adminKey}`, 'POST', {
+  // Verify Read-Only Posts Admin Dashboard (/guanli/posts)
+  const postsAdminRes = await request(`/guanli/posts?key=${adminKey}`);
+  assert.strictEqual(postsAdminRes.statusCode, 200);
+  assert(postsAdminRes.body.includes('Published Markdown Posts'), 'Posts overview page must render');
+  assert(postsAdminRes.body.includes('ai-can-change-coding-for-kids'), 'Must list authentic posts');
+
+  // Verify Hot Re-index Endpoint (/guanli/reindex)
+  const reindexRes = await request(`/guanli/reindex?key=${adminKey}`, 'POST', {
     'Content-Type': 'application/json',
     'Accept': 'application/json'
-  }, JSON.stringify({ action: 'approve', ids: [1] }));
-  assert.strictEqual(batchRes.statusCode, 200);
-  const batchData = JSON.parse(batchRes.body);
-  assert.strictEqual(batchData.success, true);
-  assert.strictEqual(batchData.action, 'approve');
-  console.log('  ✓ Admin moderation dashboard (/guanli), 404 on /admin, batch actions, and sitemap/robots secrecy verified.');
+  });
+  assert.strictEqual(reindexRes.statusCode, 200);
+  const reindexData = JSON.parse(reindexRes.body);
+  assert.strictEqual(reindexData.success, true);
+  assert(reindexData.totalPosts >= 15, 'Re-indexed post count must match');
+
+  console.log('  ✓ Admin moderation dashboard (/guanli), posts overview, hot reindex, 404 on /admin, batch actions, and sitemap/robots secrecy verified.');
 
   console.log('====================================================');
   console.log('ALL TESTS PASSED WITH 100% SUCCESS! (5/5 suites)');