fix: align mirror publishing region

The v0.10.3 release index was generated, but the pinned upload client rejected object uploads because V4 signing did not receive a region. The application and website also addressed the Beijing bucket through the previous Hangzhou endpoint.

Derive and pass the endpoint region to every upload, pin workflow configuration to the trusted production bucket, and align application and website URL validation with its actual endpoint. Advance recovery metadata to 0.10.4 and remove the unpublished 0.10.3 note.

Release note: 0.10.4 carries forward the approved mirror-node and conversation timestamp improvements from the unpublished candidates.

sites/app.js

@@ -13,7 +13,7 @@
   const finePointer = window.matchMedia("(hover: hover) and (pointer: fine)");
   const reducedMotion = window.matchMedia("(prefers-reduced-motion: reduce)");
   const releaseManifestUrl =
-    "https://goodbuddy.oss-cn-hangzhou.aliyuncs.com/releases/latest.json";
+    "https://goodbuddy.oss-cn-beijing.aliyuncs.com/releases/latest.json";
   const releaseFallbackUrl =
     "https://github.com/mesalogo/goodbuddy/releases/latest";
   const releaseStatus = document.querySelector("[data-release-status]");
@@ -44,7 +44,7 @@
       const url = new URL(value);
       return (
         url.protocol === "https:" &&
-        url.hostname === "goodbuddy.oss-cn-hangzhou.aliyuncs.com" &&
+        url.hostname === "goodbuddy.oss-cn-beijing.aliyuncs.com" &&
         url.pathname.startsWith("/releases/")
       );
     } catch {

sites/scripts/validate.mjs

@@ -149,7 +149,7 @@ report(
 report(/data-release-status/.test(html), "下载区缺少发布源状态");
 report(
   appJs.includes(
-    "https://goodbuddy.oss-cn-hangzhou.aliyuncs.com/releases/latest.json",
+    "https://goodbuddy.oss-cn-beijing.aliyuncs.com/releases/latest.json",
   ),
   "官网必须从 GoodBuddy OSS 加载最新发布索引",
 );