feat(ops): prod timezone probe, web/app container sync, and D-01 agent upgrade.

Unify upgrade-agent with install.sh via agent_deploy; auto-sync Git web/app after
Docker upgrade to prevent vite hash drift; extend prod_probe for Beijing TZ checks.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/nexus-1panel.sh

@@ -1206,6 +1206,12 @@ cmd_upgrade() {
         docker image prune -f >/dev/null 2>&1 || true
     fi
     NEXUS_ROOT="$NEXUS_ROOT" bash "$NEXUS_ROOT/deploy/install-nx-cli.sh" 2>/dev/null || true
+    if [[ -x "$NEXUS_ROOT/deploy/sync_webapp_to_container.sh" ]]; then
+        step "同步 Git web/app 进容器（消除镜像 vite 缓存 hash 漂移）..."
+        NEXUS_PUBLISH_PORT="$port" NEXUS_ROOT="$NEXUS_ROOT" bash "$NEXUS_ROOT/deploy/sync_webapp_to_container.sh" || {
+            warn "web/app 同步失败，继续健康检查（请手动执行 sync_webapp_to_container.sh）"
+        }
+    fi
     if ! verify_health "$NEXUS_ROOT" "升级"; then
         rollback_compose_upgrade "$NEXUS_ROOT" || true
         exit 1