[ops] fix deploy.sh: remove --no-frozen-lockfile flag, use venv for pip install; add post-receive hook script

deploy.sh

@@ -10,7 +10,7 @@ echo ""
 # 1. 构建前端
 echo "[1/4] 构建前端..."
 cd "$SCRIPT_DIR/frontend"
-pnpm build --no-frozen-lockfile
+pnpm build
 echo "    ✓ 构建完成"
 
 # 2. 部署前端到 Nginx
@@ -22,7 +22,9 @@ echo "    ✓ 部署完成"
 # 3. 更新后端依赖
 echo "[3/4] 更新后端..."
 cd "$SCRIPT_DIR/backend"
+source venv/bin/activate
 pip install -r requirements.txt --quiet --no-cache-dir
+deactivate
 echo "    ✓ 依赖更新完成"
 
 # 4. 重启后端服务