fix(cd): CD_PUSH_TOKEN + backup 路徑使用 BACKUP_ROOT 環境變數

- cd.yaml: GITEA_CD_TOKEN → CD_PUSH_TOKEN（Gitea 保留 GITEA_ 前綴）
- ADR-069: 同步更新 token 名稱說明
- backup-from-110.sh: 改用 BACKUP_ROOT 環境變數（預設 /home/ollama/backup/110）
  避免 /var/log /var/run 需要 root 權限
- 已部署到 188 + cron 0 1 * * * 設定完成

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

scripts/ops/backup-from-110.sh

@@ -24,8 +24,9 @@
 # =============================================================================
 set -euo pipefail
 
-LOG="/var/log/backup-from-110.log"
-LAST_SUCCESS_FILE="/var/run/backup-110.last_success"
+BACKUP_ROOT="${BACKUP_ROOT:-/home/ollama/backup/110}"
+LOG="${BACKUP_ROOT}/backup.log"
+LAST_SUCCESS_FILE="${BACKUP_ROOT}/last_success"
 DATE=$(date +%Y%m%d-%H%M%S)
 ERRORS=0
 
@@ -40,7 +41,7 @@ log "Backing up Harbor registry..."
 if rsync -avz --delete \
     -e "ssh -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10" \
     wooo@192.168.0.110:/var/lib/docker/volumes/harbor_harbor-data/_data/ \
-    /backup/110/harbor/ >> "$LOG" 2>&1; then
+    ${BACKUP_ROOT}/harbor/ >> "$LOG" 2>&1; then
     log "✅ Harbor backup OK"
 else
     log "❌ ERROR: Harbor backup failed"
@@ -52,7 +53,7 @@ log "Backing up Gitea repos..."
 if rsync -avz --delete \
     -e "ssh -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10" \
     wooo@192.168.0.110:/var/lib/docker/volumes/gitea_gitea-data/_data/ \
-    /backup/110/gitea/ >> "$LOG" 2>&1; then
+    ${BACKUP_ROOT}/gitea/ >> "$LOG" 2>&1; then
     log "✅ Gitea backup OK"
 else
     log "❌ ERROR: Gitea backup failed"
@@ -66,7 +67,7 @@ if ssh -o StrictHostKeyChecking=accept-new -o ConnectTimeout=5 \
     if rsync -avz \
         -e "ssh -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10" \
         wooo@192.168.0.110:/home/wooo/bitan-pharmacy.git/ \
-        /backup/110/bitan-pharmacy.git/ >> "$LOG" 2>&1; then
+        ${BACKUP_ROOT}/bitan-pharmacy.git/ >> "$LOG" 2>&1; then
         log "✅ bitan-pharmacy.git backup OK"
     else
         log "⚠️  bitan-pharmacy.git backup failed (non-fatal)"