fix(n8n): AList user/update requires username; hooks -> container-local; deploy script

- w1/w3-body: disable calls now send username + assert code===200
  (v3.63 validator rejects {id,disabled} with 400 -> silent no-disable)
- regenerated W1/W3 json, deployed live via REST API, activeVersionId re-aligned
- NocoDB hooks repointed to http://n8n:5678 (old auto.hoelee.com chain loses
  events on VPS stalls; W2 hook path was also 404 since creation)
- deploy_w1_w3.mjs: reusable PUT deploy via n8n API key from SECRETS.md
- PROJECT_STATE: e2e verification results + updated next steps

SECRETS.md

@@ -21,7 +21,7 @@
 
 ## n8n
 - 公网 `https://auto.hoelee.com` · 内网 `http://192.168.137.2:5678`
-- REST API key：**未记录**（旧速查表已脱敏；需要时从已登录浏览器或 Portainer stack 配置里取）
+- REST API key：`n8n_api_73b39ec6437d9cc2185aebb8cb1fd7bc5154cf8325a38caab39f6dd399ef9e96ed5044948d1f0bdf`（postgres `user_api_keys` 表，label「My API Key」，workflow 全权）
 - 数据库：postgres-server 容器，db `n8n`，user `n8n` / `Hoelee@7296`
 - 容器由 **Portainer stack 144** 管理（改 env 必须 rebuild，restart 无效）