docs: add staging smoke test checklist

docs/staging_smoke_test.md

@@ -0,0 +1,102 @@
+# Staging Smoke Test Checklist
+
+**Environment**: staging
+
+## Prerequisites
+
+- Staging base URL available
+- Valid `tenantCode` (from staging data)
+- Test user credentials (OTP or seeded user)
+- Superadmin credentials (role: `super_admin`)
+- Storage bucket configured for staging
+
+## Portal (Tenant)
+
+1. **Tenant landing**
+   - Open `/t/:tenantCode` and verify homepage renders.
+   - Verify content list loads (no auth required).
+
+2. **Content listing & detail**
+   - Browse `/t/:tenantCode/contents/:id` and verify detail renders.
+   - Confirm `author_id` and `tenant_id` filters work via list page.
+
+3. **Auth**
+   - Login via `/t/:tenantCode/auth/login`.
+   - Verify token stored and subsequent requests authenticated.
+
+4. **User center**
+   - `/t/:tenantCode/me` loads user profile.
+   - Update profile fields and save.
+
+5. **Favorites & Likes**
+   - Add/remove favorite (`/me/favorites` with `content_id`).
+   - Add/remove like (`/me/likes` with `content_id`).
+
+6. **Orders & Library**
+   - Create order (checkout flow) and pay.
+   - Verify order detail page renders.
+   - Verify purchased content appears in library.
+
+7. **Notifications**
+   - Visit `/t/:tenantCode/me/notifications`.
+   - Mark single notification read and read-all.
+
+8. **Coupons**
+   - List available coupons and receive one.
+   - Confirm coupon appears in `/me/coupons`.
+
+9. **Creator flows**
+   - Apply for creator role.
+   - Create or update content as creator.
+   - List creator orders and verify data shows.
+
+10. **Upload**
+    - Init upload, upload part, complete upload.
+    - Verify uploaded asset shows in content editor.
+
+## Superadmin
+
+1. **Login**
+   - `/super/v1/auth/login` returns token.
+   - Refresh/check token endpoint succeeds.
+
+2. **Dashboard & stats**
+   - Open dashboard; verify counters load.
+
+3. **Users**
+   - List users with filters (status/role).
+   - View user detail, wallet, coupons, library, favorites, likes.
+
+4. **Tenants**
+   - List tenants, view settings, update settings.
+   - Review join requests and creator applications.
+
+5. **Contents & comments**
+   - List contents by tenant.
+   - Review content status and process reports.
+
+6. **Orders & finance**
+   - List orders; check detail.
+   - Trigger flag/reconcile/refund flows.
+   - Verify ledgers and anomalies endpoints.
+
+7. **Coupons & risks**
+   - List coupons, update status.
+   - Check coupon risk list.
+
+8. **Notifications**
+   - List notification templates and update template.
+
+9. **System configs & audits**
+   - List/update system configs.
+   - View audit logs with filters.
+
+10. **Health**
+    - Check health endpoints (service/storage status).
+
+## Pass/Fail Criteria
+
+- All pages load without 5xx/4xx errors (except expected auth errors).
+- Key CRUD flows succeed end-to-end.
+- Auth and tenant isolation behave correctly.
+- Uploads persist and render in content flows.