Add migration token parameters to Jenkins deploy flows

jenkins/Jenkinsfile.deploy

@@ -15,6 +15,8 @@ pipeline {
     booleanParam(name: 'CLEAR_DATABASE', defaultValue: false, description: '部署时是否清空 SpacetimeDB 数据后再发布 wasm')
     booleanParam(name: 'MIGRATE_ON_CONFLICT', defaultValue: true, description: '普通发布遇到 SpacetimeDB schema 冲突时自动导出、清库发布并导入回灌')
     string(name: 'MIGRATION_DIRECTORY', defaultValue: '', description: '自动迁移 JSON 输出目录，留空则使用部署目录内 database-migrations/<database>')
+    password(name: 'MIGRATION_EXPORT_TOKEN', defaultValue: '', description: '可选，旧库已授权迁移操作员 token，仅用于 schema 冲突导出')
+    password(name: 'MIGRATION_IMPORT_TOKEN', defaultValue: '', description: '可选，新库已授权迁移操作员 token，仅用于 schema 冲突导入')
     booleanParam(name: 'RUN_DEPLOY_HOOKS_WITH_SUDO', defaultValue: true, description: 'start.sh / stop.sh 是否通过 sudo -n 执行')
     string(name: 'EXPECTED_UPSTREAM_JOB', defaultValue: '', description: '允许触发本作业的上游作业名')
   }
@@ -127,6 +129,12 @@ pipeline {
               if [[ -n "${params.MIGRATION_DIRECTORY}" ]]; then
                 deploy_args+=(--migration-dir "${params.MIGRATION_DIRECTORY}")
               fi
+              if [[ -n "${params.MIGRATION_EXPORT_TOKEN}" ]]; then
+                deploy_args+=(--migration-export-token "${params.MIGRATION_EXPORT_TOKEN}")
+              fi
+              if [[ -n "${params.MIGRATION_IMPORT_TOKEN}" ]]; then
+                deploy_args+=(--migration-import-token "${params.MIGRATION_IMPORT_TOKEN}")
+              fi
               if [[ "${params.RUN_DEPLOY_HOOKS_WITH_SUDO}" == "true" ]]; then
                 deploy_args+=(--hook-with-sudo)
               fi