### Task 2: 实现 nginx `/web` 反代（GREEN）

**Files:**
- Modify: `deploy/baota/nginx.rewrite`（在 `/mobile/` 块之后、`location = /` 与 `location /` 之前插入）
- Test: `tests/deploy/baota/test-nginx-web-location.sh`

**Interfaces:**
- Consumes: Task 1 测试断言
- Produces: 符合用户片段的 `/web/` 反代（含 Upgrade 头）

- [ ] **Step 1: 插入 location 块**

在 `# --- H5 商城 SPA ...` 块结束后、`# --- 根路径默认进管理后台 ---` 之前插入：

```nginx
# --- PC Nuxt SSR（站点根 web/.output，进程监听 127.0.0.1:3000）---
location = /web {
    return 301 /web/;
}
location ^~ /web/ {
    proxy_pass http://127.0.0.1:3000;   # 注意：后面不要加 /
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
}
```

- [ ] **Step 2: 运行测试确认 GREEN**

Run: `bash tests/deploy/baota/test-nginx-web-location.sh`  
Expected: exit 0

- [ ] **Step 3: Commit**（仅当用户要求提交时）

```bash
git add deploy/baota/nginx.rewrite tests/deploy/baota/
git commit -m "feat(baota): proxy /web to Nuxt on :3000"
```

---

