fix: 单仓后统一版本号与访问地址说明

- 编排与文档里的 app 镜像 tag 由 v1.0.2 统一为 v1.0.4（单仓一个发布版本，
  v1.0.4 包含 app 线，不再保留源仓的历史 tag 差异）
- deploy/README.md、docs/deploy/install.md 明确业务端口默认只绑 127.0.0.1，
  并给出对外访问的两种做法（with-nginx profile / 改绑定）
- mirror-to-gitee 增加推送后校验：远端 main 与本地不一致则判失败

deploy/docker-compose.yml

@@ -285,7 +285,7 @@ services:
         condition: service_healthy
 
   app-server:
-    image: 'crpi-qflrqrxoohlkkvgc.cn-chengdu.personal.cr.aliyuncs.com/iotlcm/iotlcm:iotlcm-app-server-v1.0.2'
+    image: 'crpi-qflrqrxoohlkkvgc.cn-chengdu.personal.cr.aliyuncs.com/iotlcm/iotlcm:iotlcm-app-server-v1.0.4'
     container_name: iotlcm-app-server
     restart: always
     ports:
@@ -306,7 +306,7 @@ services:
         condition: service_healthy
 
   app-web:
-    image: 'crpi-qflrqrxoohlkkvgc.cn-chengdu.personal.cr.aliyuncs.com/iotlcm/iotlcm:iotlcm-app-web-v1.0.2'
+    image: 'crpi-qflrqrxoohlkkvgc.cn-chengdu.personal.cr.aliyuncs.com/iotlcm/iotlcm:iotlcm-app-web-v1.0.4'
     container_name: iotlcm-app-web
     restart: always
     ports: