feat(scripts): 收纳运维/部署/修复/调试脚本到 scripts/ 目录

**目录结构**：
- scripts/                 顶层运维/工具脚本（20 个）
- scripts/deploy/          一键部署脚本（deploy_*.py / upload_*.py / redeploy.py 等 8 个）
- scripts/fix/             一次性修复脚本（fix_*.py / fix_*.cypher / fix_*.sql 等 9 个）
- scripts/debug/           调试脚本集合（check_*.py/sql、test_*.py、debug_*.py 等 42 个）

**ops-tools/jms_ops.py**：jumpserver-ops skill 默认路径修复
- 从 'jumpserver-automation-shareable' 改为 'jumpserver-ops'
- 同步更新注释（优先 JP_SKILL_DIR 环境变量）

**典型脚本用途**：
- scripts/deploy-v1.2.ps1 / -staging.ps1：一键部署 v1.2 到生产 / staging
- scripts/init_quick_rules.sql：quick_rules 表初始数据
- scripts/gen_admin_token.py：生成 admin JWT token（调试用）
- scripts/build-and-verify.sh：v1.1 实施验证脚本
- scripts/verify_*.sh / .py：API/quick_rules 验证
- scripts/fix/*.py：环境修复（compose、env_key、itsm_bridge 等）

合计 81 文件 + 3317 行 / - 1 行

scripts/debug/diagnose-500.sh

@@ -0,0 +1,84 @@
+#!/bin/bash
+# =============================================================================
+# /itdesk/ 500 错误诊断脚本
+# 在生产服务器 10.90.5.110 上跑(PuTTY 登录后):
+#   cd /opt/wecom-it-desk
+#   bash diagnose-500.sh > /tmp/diag.log 2>&1
+#   cat /tmp/diag.log
+# =============================================================================
+
+echo "========== 1. 容器状态 =========="
+docker compose ps
+
+echo ""
+echo "========== 2. /opt/wecom-it-desk 目录结构 =========="
+ls -la /opt/wecom-it-desk/ 2>&1 | head -20
+echo "--- frontend-h5/dist ---"
+ls -la /opt/wecom-it-desk/frontend-h5/dist/ 2>&1 | head -10
+echo "--- frontend-h5/dist/assets ---"
+ls -la /opt/wecom-it-desk/frontend-h5/dist/assets/ 2>&1 | head -10
+echo "--- frontend-agent/dist/assets ---"
+ls -la /opt/wecom-it-desk/frontend-agent/dist/assets/ 2>&1 | head -10
+echo "--- frontend-portal/dist/assets ---"
+ls -la /opt/wecom-it-desk/frontend-portal/dist/assets/ 2>&1 | head -10
+echo "--- frontend-admin/dist/assets ---"
+ls -la /opt/wecom-it-desk/frontend-admin/dist/assets/ 2>&1 | head -10
+
+echo ""
+echo "========== 3. nginx 容器内文件检查 =========="
+docker compose exec nginx ls -la /usr/share/nginx/html/ 2>&1 | head -20
+echo "--- /usr/share/nginx/html/itdesk ---"
+docker compose exec nginx ls -la /usr/share/nginx/html/itdesk/ 2>&1 | head -10
+echo "--- /usr/share/nginx/html/itdesk/assets ---"
+docker compose exec nginx ls -la /usr/share/nginx/html/itdesk/assets/ 2>&1 | head -10
+echo "--- /usr/share/nginx/ssl/ ---"
+docker compose exec nginx ls -la /etc/nginx/ssl/ 2>&1 | head -10
+
+echo ""
+echo "========== 4. nginx 配置实际生效版本(头部 50 行)=========="
+docker compose exec nginx cat /etc/nginx/nginx.conf 2>&1 | head -50
+
+echo ""
+echo "========== 5. nginx 容器端口监听 =========="
+docker compose exec nginx netstat -tlnp 2>&1 | head -10
+echo "(没 netstat 用 ss:)"
+docker compose exec nginx ss -tlnp 2>&1 | head -10
+
+echo ""
+echo "========== 6. 直接 curl 测试各路径 =========="
+echo "--- /itdesk/ (容器内) ---"
+docker compose exec nginx curl -ksI https://localhost/itdesk/ 2>&1 | head -20
+echo "--- /itdesk/ (容器外主机 443) ---"
+curl -ksI https://localhost:443/itdesk/ 2>&1 | head -20
+echo "--- /itportal/ ---"
+curl -ksI https://localhost:443/itportal/ 2>&1 | head -20
+echo "--- /itdesk/assets/ (探 404) ---"
+curl -ksI https://localhost:443/itdesk/assets/ 2>&1 | head -20
+
+echo ""
+echo "========== 7. 主机实际 URL 域名 =========="
+curl -ksI https://itsupport.servyou.com.cn/itdesk/ 2>&1 | head -20
+echo "---"
+curl -ksI https://itsupport.servyou.com.cn/itportal/ 2>&1 | head -20
+echo "---"
+curl -ksI https://itsupport.servyou.com.cn/itagent/ 2>&1 | head -20
+echo "---"
+curl -ksI https://itsupport.servyou.com.cn/itadmin/ 2>&1 | head -20
+
+echo ""
+echo "========== 8. nginx access log 最近 30 行(找 500 请求)=========="
+docker compose exec nginx tail -30 /var/log/nginx/access.log 2>&1
+echo ""
+echo "========== 9. nginx error log 最近 30 行 =========="
+docker compose exec nginx tail -30 /var/log/nginx/error.log 2>&1
+
+echo ""
+echo "========== 10. backend 容器健康 =========="
+docker compose ps backend
+echo "--- backend health endpoint ---"
+docker compose exec backend curl -ks http://localhost:8000/api/health 2>&1 | head -5
+
+echo ""
+echo "========== 11. 看一下后端访问 /api/h5/me (H5 启动时会调)=========="
+echo "--- /api/h5/me 无 token ---"
+curl -ks -i -X GET https://itsupport.servyou.com.cn/api/h5/me 2>&1 | head -10