feat: K8s 部署清单、Token 接入加固与日志/设置页优化

- kubernetes/: 30Gi PVC、单副本 Recreate、Secret/Service/NodePort/Ingress 清单与部署文档
- 数据安全: kubeconfig/token 统一加密存储，启动迁移历史明文，DB 0600
- Token 接入: 命名空间级最小权限提示、长期 Token、自签证书 TLS 兼容
- 部署: 命名空间级 Token 下跳过 Namespace patch/枚举，节点信息容错
- 日志页: namespace → app → pod 选择顺序与作用域收窄
- 设置页: 拆分为通用/告警/LDAP/镜像源四个 tab
- 弹框: 统一 max-h 滚动与长命令换行，修复内容溢出

frontend/src/pages/deployments/components/DeploymentCard.tsx

@@ -1,4 +1,5 @@
 import { memo, useEffect, useState } from 'react'
+import { Link } from 'react-router'
 import { Play, Square, RotateCw, Trash2, Terminal, ExternalLink, Pencil, Rocket } from 'lucide-react'
 import { Button } from '@/components/ui/button'
 import { StatusBadge } from '@/components/StatusBadge'
@@ -91,7 +92,12 @@ export const DeploymentCard = memo(function DeploymentCard({
           </a>
         ) }] : []),
       ]}
-      message={d.statusMessage || undefined}
+      message={
+        d.statusMessage ||
+        (d.status === 'running'
+          ? '提示：到「日志查询 → 数据源」关联 Loki 后即可查询；跨集群/公网访问需先为 Loki 配置 Ingress 域名。'
+          : undefined)
+      }
       actions={
         <>
           <Button variant="outline" size="sm" className="text-xs" onClick={() => onEditRetention(d)} disabled={isDeploying || isBusy}>
@@ -115,6 +121,16 @@ export const DeploymentCard = memo(function DeploymentCard({
               </Button>
             </>
           )}
+          {d.status === 'running' && (
+            <>
+              <Button variant="outline" size="sm" className="text-xs" asChild>
+                <Link to="/logs">日志查询</Link>
+              </Button>
+              <Button variant="outline" size="sm" className="text-xs" asChild>
+                <Link to="/collectors">采集器</Link>
+              </Button>
+            </>
+          )}
           <Button variant="outline" size="sm" className="text-xs" onClick={() => onViewLogs(d)}>
             <Terminal className="size-3 mr-1" />日志
           </Button>