Add migration token parameters to Jenkins deploy flows

scripts/spacetime-import-migration-json.mjs

@@ -58,16 +58,24 @@ async function prepareWebImportOptions(options) {
     `[spacetime:migration:import] 已通过 Web API 创建临时 identity: ${identity.identity}`,
   );
 
-  const authorizeResult = await callSpacetimeProcedureViaCli(
-    options,
-    'authorize_database_migration_operator',
-    {
-      bootstrap_secret: options.bootstrapSecret || '',
-      operator_identity_hex: identity.identity,
-      note: options.note || 'temporary web api migration import',
-    },
-  );
-  ensureProcedureOk(authorizeResult);
+  try {
+    const authorizeResult = await callSpacetimeProcedureViaCli(
+      options,
+      'authorize_database_migration_operator',
+      {
+        bootstrap_secret: options.bootstrapSecret || '',
+        operator_identity_hex: identity.identity,
+        note: options.note || 'temporary web api migration import',
+      },
+    );
+    ensureProcedureOk(authorizeResult);
+  } catch (error) {
+    throw new Error(
+      `授权临时 Web API identity 失败。当前 spacetime CLI identity 必须已经是迁移操作员；如果目标库迁移操作员表不为空，bootstrap secret 不会越权授权新的操作员。可先用已有迁移操作员授权当前部署机 identity，或为导入脚本提供已有迁移操作员的 --token。原始错误: ${
+        error instanceof Error ? error.message : String(error)
+      }`,
+    );
+  }
   console.log(`[spacetime:migration:import] 已授权临时 Web API identity`);
 
   return {