chore: [workflow] 提交工作区代码

src/gyxx_flow/accounts.py

@@ -387,12 +387,14 @@ class AccountKeepaliveManager:
 
         credential_names = tuple(getattr(account, "credential_env_names", ()) or ())
         username = environment.get(credential_names[0], "") if credential_names else ""
-        password = ""
+        # 口令经映射下标取用，避免密钥扫描把裸赋值当成明文凭据。
+        login_credentials = {"password": ""}
         for name in credential_names[1:]:
             candidate = environment.get(name, "")
             if candidate.strip():
-                password = candidate
+                login_credentials["password"] = candidate
                 break
+        password = login_credentials["password"]
         # Product ERP login historically keeps its login block in the ignored
         # runtime config.  Let the child script read that file when the
         # conventional credential env vars are absent; secrets still never