chore(env): 更新本地开发环境配置

- 开启 GATEWAY_CORS_ALLOW_ALL=1（本地开发跨域放行）
- 更新前端 .env.development

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend-web/.env.development

@@ -32,3 +32,6 @@ VITE_AIPI_PGLINKTO_URL=https://pg.b.uat.4.cn
 VITE_AIPI_XKLINKTO_URL=https://kz.b.uat.4.cn
 # 可选：Canvas 独立 LangGraph 地址（不设则回退到 VITE_LANGGRAPH_BASE_URL）
 # VITE_CANVAS_LANGGRAPH_BASE_URL=
+
+# 我的笔记是否显示，侧边栏
+VITE_STUDIO_ENABLED=false

offline-backend-20260512/.env

@@ -18,7 +18,7 @@ SERPER_API_KEY=your-serper-api-key
 # GATEWAY_CORS_ORIGINS must include the exact frontend origins, separated by commas.
 AUTH_JWT_SECRET=i3_BiBK44sYHiFIkChhDs46y57ZewJKO3diQDw01anI
 GATEWAY_CORS_ORIGINS=http://localhost:5173,http://127.0.0.1:5173
-GATEWAY_CORS_ALLOW_ALL=0
+GATEWAY_CORS_ALLOW_ALL=1
 GATEWAY_ENABLE_DOCS=true
 GATEWAY_WORKERS=2
 DEER_FLOW_AUTH_DISABLED=false