fix(docker): H-05 优化 Dockerfile 环境变量配置

- 添加清晰的注释说明 SUB2API_CRM_ADMIN_TOKEN 为必需配置
- 分离必需和可选环境变量到不同区块
- 更新 Go 版本到 1.23 以匹配 go.mod

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.22.2 AS builder
+FROM golang:1.23 AS builder
 ARG http_proxy=
 ARG https_proxy=
 ARG HTTP_PROXY=
@@ -35,9 +35,16 @@ RUN apt-get update \
     && rm -rf /var/lib/apt/lists/*
 WORKDIR /app
 COPY --from=builder /out/sub2api-cn-relay-manager /usr/local/bin/sub2api-cn-relay-manager
-ENV SUB2API_CRM_LISTEN_ADDR=:8080
-ENV SUB2API_CRM_SQLITE_DSN=file:/data/sub2api-cn-relay-manager.db?_foreign_keys=on&_busy_timeout=5000
+
+# Required: Admin API token for administrative endpoints
+# Must be provided at runtime, container will fail to start without it
 ENV SUB2API_CRM_ADMIN_TOKEN=
+
+# Optional: Listen address (defaults to :8080)
+ENV SUB2API_CRM_LISTEN_ADDR=:8080
+
+# Optional: SQLite DSN (defaults to /data/sub2api-cn-relay-manager.db)
+ENV SUB2API_CRM_SQLITE_DSN=file:/data/sub2api-cn-relay-manager.db?_foreign_keys=on&_busy_timeout=5000
 VOLUME ["/data"]
 EXPOSE 8080
 ENTRYPOINT ["/usr/local/bin/sub2api-cn-relay-manager"]