v0.8.0-alpha.1 - Stage 7 release readiness

Highlights

• complete automated merchant-to-customer browser acceptance, migration and concurrent-stock verification
• add security abuse cases and dependency/service recovery drills
• remove Nacos from the fixed single-merchant topology and use private Docker DNS routes
• harden and scan MySQL, Redis, Nginx, application and observability images
• add quality evidence, pilot Go/No-Go guidance and explicit known limitations

Upgrade notes

• create and verify an encrypted backup before upgrading
• the upgrade rebuilds the MySQL 8.0.46 Debian runtime while preserving the data volume
• the retired Nacos container is removed; its old data volume is retained for manual confirmation
• run login, catalog, checkout, fulfillment, monitoring and backup checks after upgrade

Known limitations

• pre-release only: real merchant pilot and public-domain TLS acceptance are still pending
• COD/OFFLINE only; no online payment gateway or channel reconciliation
• external Alertmanager delivery requires deployment-specific receiver configuration

See docs/发布说明与已知限制.md, docs/质量与安全验收记录.md and docs/试点验收手册.md.