feat(mindspace): add SEO/GEO delivery, page template catalog, and admin hooks

Enable optional SEO/GEO injection and discovery routes for confirmed public pages while keeping private pages noindex. Add premium page template skills, portal catalog API, template shop UI, and Baidu push gated by memind_adm config.

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.example

@@ -200,7 +200,8 @@ H5_PUBLIC_BASE_URL=http://127.0.0.1:5173
 # 新增 goosed 调用须走 tkmind-proxy；MindSpace 例外见 goosed-proxy-boundary.mjs allowlist
 
 # H5 public HTML 假交付 guard（docs/pending-fixes/h5-public-html-fake-delivery-guard-20260706.md）
-# 默认 0：仅 warn；设 1 时 Finish 后检测缺失 public/*.html / assets/* 并自动 session repair（每 session 1 次）
+# 生产默认 0：仅 warn；设 1 时 Finish 后检测缺失 public/*.html / assets/* / 页面模板漂移并自动 session repair（每 session 1 次）
+# pnpm dev（local / split-service profile）未显式配置时默认 1；可在 .env 设 MEMIND_H5_HTML_FINISH_GUARD=0 关闭
 # MEMIND_H5_HTML_FINISH_GUARD=0
 
 # H5 run SSE replay（Patch 4b，仅本地/测试分支；默认关，未合并 main / 未上 103）
@@ -403,6 +404,18 @@ VITE_TKMIND_WORKING_DIR=/Users/john/PycharmProjects/tkmind
 # MINDSPACE_AGENT_JOBS_ENABLED=true
 # MINDSPACE_INTERNAL_AGENT_SECRET=local-dev-secret
 # MINDSPACE_FREE_PUBLIC_PAGE_LIMIT=10
+# MINDSPACE_SEO_GEO_ENABLED=false
+# MINDSPACE_SEO_ENABLED=false
+# MINDSPACE_SEO_CANONICAL=true
+# MINDSPACE_SEO_SITEMAP=false
+# MINDSPACE_SEO_ROBOTS_TXT=false
+# MINDSPACE_SEO_BAIDU_PUSH=false
+# MINDSPACE_GEO_ENABLED=false
+# MINDSPACE_GEO_JSONLD=false
+# MINDSPACE_GEO_LLMSTXT=false
+# MINDSPACE_BAIDU_PUSH_TOKEN=
+# MINDSPACE_BAIDU_SITE=m.tkmind.cn
+# PLAZA_BAIDU_PUSH_TOKEN=
 # image_make 独立生图服务。只有 URL、Token 与 memind_adm 资产能力开关同时配置后才会调用。
 # IMAGE_MAKE_BASE_URL=http://127.0.0.1:8080
 # IMAGE_MAKE_TOKEN=dev-token