feat(HEL-238): 按确认样图重做手机端系统管理，并加入部署基线门禁

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: multica-agent <github@multica.ai>

tools/build_image.sh

@@ -59,6 +59,9 @@ if [[ "$TAG" != *-"$SHORT" ]]; then
   exit 1
 fi
 
+echo "==> 部署基线门禁（线上提交必须是候选祖先）"
+bash "$(git rev-parse --show-toplevel)/tools/check_deploy_baseline.sh" "$FULL_SHA"
+
 echo "==> 构建计划"
 echo "    提交: ${FULL_SHA}  ${SUBJECT}"
 echo "    镜像: ${REPO_NAME}:${TAG}  @ ${HOST}"