refactor: clean repository, split profiles, add Flyway and harden upload flowFeat/security flyway upload tests

.env.example

@@ -0,0 +1,12 @@
+SPRING_DATASOURCE_URL=jdbc:mysql://localhost:3306/blog_db?useUnicode=true&characterEncoding=utf8&useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=Asia/Shanghai
+SPRING_DATASOURCE_USERNAME=your_username
+SPRING_DATASOURCE_PASSWORD=your_password
+
+MAIL_HOST=smtp.qq.com
+MAIL_PORT=465
+MAIL_USERNAME=your@qq.com
+MAIL_PASSWORD=your-app-code
+MAIL_PROTOCOL=smtps
+
+# Upload directory override (optional). Default is ${user.dir}/uploads
+APP_UPLOAD_DIR=C:/data/blog/uploads

.github/workflows/ci.yml

@@ -0,0 +1,28 @@
+name: CI
+
+on:
+  push:
+    branches: [ "**" ]
+  pull_request:
+    branches: [ "**" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '17'
+          cache: maven
+      - name: Run tests
+        env:
+          SPRING_PROFILES_ACTIVE: test
+        run: mvn -B -ntp test
+      - name: Package
+        env:
+          SPRING_PROFILES_ACTIVE: test
+        run: mvn -B -ntp -DskipTests package

.gitignore

@@ -2,10 +2,56 @@
 /target/
 *.log
 
+# Compiled artifacts
+*.class
+*.jar
+
 # IntelliJ
 /.idea/
 *.iml
 
+# Visual Studio / Visual Studio Code
+/.vs/
+/.vscode/
+
 # OS
 Thumbs.db
 .DS_Store
+
+# Eclipse
+/.settings/
+.classpath
+.project
+.factorypath
+
+# Local database dumps / backups
+/blog_db_backup.sql
+*.sql.bak
+*.dump
+/backups/
+/backup/
+
+# Local runtime data
+uploads/*
+!uploads/.gitkeep
+
+# Local config / secrets
+.env
+.env.*
+application-local.yml
+application-local.yaml
+application-local.properties
+src/main/resources/application-local.yml
+src/main/resources/application-dev-local.yml
+src/main/resources/application-prod-local.yml
+
+# Root-level stray compiled or source artifacts
+/com/
+
+# Logs
+logs/
+
+# Local Spring Boot config (do not commit secrets)
+application-local.yml
+application-local.yaml
+application-local.properties