feat(map): amap as map api provider and display template

server/src/app-config/README.md

@@ -77,7 +77,7 @@ below.)
 
 **Runtime-toggled** (read live on every access via `readEnv()` /
 `RuntimeEnvService`; tests mutate these mid-lifetime):
-TREK_MANAGED, PLACES_API_BASE, PLACES_API_KEY, MAPBOX_ACCESS_TOKEN, CARTO_API_KEY, DEMO_MODE, NODE_ENV, APP_VERSION, APP_URL, TREK_API_DOCS_ENABLED,
+TREK_MANAGED, PLACES_API_BASE, PLACES_API_KEY, AMAP_API_BASE, AMAP_API_KEY, AMAP_API_SECRET, MAPBOX_ACCESS_TOKEN, CARTO_API_KEY, DEMO_MODE, NODE_ENV, APP_VERSION, APP_URL, TREK_API_DOCS_ENABLED,
 TREK_PLUGINS_ENABLED / _DEV_LINK / _IGNORE_TREK_RANGE / _DIR / _DATA_DIR / TREK_PLUGIN_PERMISSIONS,
 OIDC_*, SMTP_*, FORCE_HTTPS, COOKIE_SECURE, HSTS_INCLUDE_SUBDOMAINS,
 ALLOWED_ORIGINS, UNSPLASH_ACCESS_KEY, WEBAUTHN_*, TZ, ADMIN_EMAIL,

server/src/app-config/derive.ts

@@ -153,6 +153,15 @@ export function deriveMaps(raw: RawEnv) {
      */
     trekPlacesEnabled: raw.TREK_PLACES_ENABLED !== 'false',
     placesApiKey: raw.PLACES_API_KEY || undefined,
+    /** The same two knobs for Amap (高德), which an install in China uses instead. */
+    amapApiBase: raw.AMAP_API_BASE || undefined,
+    amapApiKey: raw.AMAP_API_KEY || undefined,
+    /**
+     * Amap's optional 数字签名 secret. A key created with one rejects every
+     * unsigned request, so this is not a hardening option — it is required
+     * whenever the operator's key was issued that way.
+     */
+    amapApiSecret: raw.AMAP_API_SECRET || undefined,
     /** Public pk.* token shipped with a managed instance; reaches the browser by design. */
     mapboxToken: raw.MAPBOX_ACCESS_TOKEN || undefined,
     /** CARTO basemap key; without one the tiles come back watermarked (#2054). Public too. */

server/src/app-config/env.schema.ts

@@ -146,6 +146,9 @@ export const envSchema = z.object({
   TREK_PLACES_URL: url,
   TREK_PLACES_ENABLED: boolStr,
   PLACES_API_KEY: anyString,
+  AMAP_API_BASE: url,
+  AMAP_API_KEY: anyString,
+  AMAP_API_SECRET: anyString,
   MAPBOX_ACCESS_TOKEN: anyString,
   CARTO_API_KEY: anyString,
   DEMO_MODE: boolStr,