fix: stabilize systemd deployment and release updates

deploy/baota-init.sh

@@ -155,6 +155,9 @@ main() {
   field_key=$(openssl rand -base64 32 | tr -d '\n')
   setup_code="KD-$(random_secret)"
   setup_hash=$(printf '%s' "$setup_code" | sha256sum | awk '{print $1}')
+  # The Baota process manager does not own a restartable application unit.
+  # Keep its updater files for diagnostics, but do not expose online update
+  # actions until the panel lifecycle is integrated with the transaction state machine.
   write_env_file "$CONFIG_ROOT/kaidi.env" \
     SPRING_PROFILES_ACTIVE production \
     SERVER_ADDRESS 127.0.0.1 \
@@ -174,7 +177,7 @@ main() {
     FINANCE_SETUP_ENV_FILE "$STATE_ROOT/setup/application.env" \
     FINANCE_SETUP_MARKER_FILE "$STATE_ROOT/setup/locked" \
     FINANCE_SETUP_RESTART_AFTER_COMPLETE true \
-    FINANCE_UPDATE_ENABLED true \
+    FINANCE_UPDATE_ENABLED false \
     UPDATE_RELEASE_BASE_URL '' \
     UPDATE_RELEASE_API_URL "$RELEASE_API_URL" \
     UPDATE_RELEASE_TOKEN '' \