chore: harden production deploy scripts

scripts/deploy-prod-safe.sh

@@ -50,11 +50,20 @@ rsync -az --delete \
   --filter='P /api/.env.production' \
   --exclude='/.git/' \
   --exclude='/.memory/' \
+  --exclude='/.backups/' \
   --exclude='/.logs/' \
   --exclude='/.pids/' \
+  --exclude='/.playwright-mcp/' \
+  --exclude='/.DS_Store' \
+  --exclude='*.log' \
+  --exclude='__pycache__/' \
+  --exclude='*.pyc' \
   --exclude='/data/' \
+  --exclude='/data-local/' \
   --exclude='/jobs/' \
+  --exclude='/output/' \
   --exclude='/secrets/' \
+  --exclude='/api/.venv/' \
   --exclude='/api/jobs/' \
   --exclude='/api/.env' \
   --exclude='/api/.env.local' \
@@ -63,6 +72,8 @@ rsync -az --delete \
   --exclude='/web/node_modules/' \
   --exclude='/web/.next/' \
   --exclude='/web/out/' \
+  --exclude='/web/canvas-app/node_modules/' \
+  --exclude='/web/canvas-app/dist/' \
   --exclude='/node_modules/' \
   --exclude='内部分享-口播脚本.md' \
   ./ "$HOST:$APP_DIR/"