fix: 收口融合 QA 构建与验收安全基线

qa-bootstrap/round5v.env.example

@@ -0,0 +1,8 @@
+# COPY outside Git, chmod 600. Literal KEY=value only, no shell expansion.
+# Never reuse the old QA_DB_URL from another database.
+FUSION_QA_DB_URL='jdbc:kingbase8://192.168.139.218:4321/railwaysystem_fusion_qa_20261013?connectTimeout=5&socketTimeout=15'
+FUSION_QA_APP_PASSWORD='REPLACE_WITH_APPROVED_APP_PASSWORD'
+TRAIN_STUDENT_IDENTITY_ENCRYPTION_KEY='REPLACE_WITH_APPROVED_QA_ENCRYPTION_KEY'
+TRAIN_STUDENT_IDENTITY_HASH_KEY='REPLACE_WITH_APPROVED_QA_HASH_KEY'
+# qa.py creates a separate 0600 runtime-secrets.env for this isolated instance.
+# Admin login credentials are provisioned externally, not seeded or reset by these scripts.