chore(k8s): prod 注入 MAGIC_LINK_PUBLIC_BASE_URL + 升级 mcp-server 镜像 tag

- configmap.yaml：新增 MAGIC_LINK_PUBLIC_BASE_URL=APIM 域（§11 终态）
- mcp-server.yaml：引用该 env + 镜像升至 magic-link-20260609

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

k8s/prod/configmap.yaml

@@ -58,3 +58,9 @@ data:
   SMTP_PORT: "465"
   SMTP_EMAIL: "taijiagent@189.cn"
   SMTP_USE_SSL: "true"
+
+  # ===========================================
+  # Heicode magic-link 邮箱登录（§11 终态：统一走 APIM 网关）
+  # 用于邮件正文里拼出浏览器可直接打开的 landing 绝对 URL
+  # ===========================================
+  MAGIC_LINK_PUBLIC_BASE_URL: "https://apimtaiji.azure-api.net/api/mcp"

k8s/prod/mcp-server.yaml

@@ -31,7 +31,7 @@ spec:
     spec:
       containers:
       - name: mcp-server
-        image: taiji.azurecr.io/mcp-server:latest
+        image: taiji.azurecr.io/mcp-server:magic-link-20260609
         imagePullPolicy: Always
         ports:
         - containerPort: 8000
@@ -161,6 +161,13 @@ spec:
               name: taiji-secrets
               key: smtp-password
 
+        # Heicode magic-link 邮箱登录：本服务对外公网基址（§11 终态=APIM）
+        - name: MAGIC_LINK_PUBLIC_BASE_URL
+          valueFrom:
+            configMapKeyRef:
+              name: taiji-config
+              key: MAGIC_LINK_PUBLIC_BASE_URL
+        
         # PayPal 支付配置 (生产环境)
         - name: PAYPAL_CLIENT_ID
           valueFrom: