feat(web): keep saved connection credentials on the server

docs/content/docs/getting-started.cn.mdx

@@ -102,10 +102,13 @@ description: 安装 DBX、创建第一个连接，并了解桌面版、Docker
     | --- | --- | --- |
     | `DBX_PASSWORD` | 未设置 | Web 登录密码，生产环境建议设置 |
     | `DBX_DISABLE_PASSWORD` | `false` | 设为 `true` 或 `1` 可关闭登录保护 |
+    | `DBX_DISABLE_PASSWORD_VIEWER` | `false` | 设为 `true` 或 `1` 后，已保存连接凭据不返回浏览器，关闭密码查看、含密码复制及含凭据同步导出 |
     | `DBX_DATA_DIR` | `/app/data` | 持久化数据目录 |
     | `DBX_PORT` | `4224` | 容器内监听端口 |
     | `DBX_PUBLIC_BASE_PATH` | `/` | 子路径部署，例如 `/dbx` |
 
+    关闭密码查看后，已配置连接仍使用服务端保存的凭据。密码框显示固定占位符；不修改时保留原值，输入新值可替换原值。修改连接目标时不能复用隐藏的旧凭据，需要输入替换凭据。修改环境变量后请重启服务端并刷新浏览器。
+
     启动后访问 `http://localhost:4224`。
 
     `deploy/docker-compose.yml` 用于构建当前源码。若要部署已发布镜像，请使用 `deploy/docker-compose.release.yml`：

docs/content/docs/getting-started.mdx

@@ -102,10 +102,13 @@ This guide gets you through three things:
     | --- | --- | --- |
     | `DBX_PASSWORD` | Not set | Web login password; recommended for production |
     | `DBX_DISABLE_PASSWORD` | `false` | Set to `true` or `1` to disable login protection |
+    | `DBX_DISABLE_PASSWORD_VIEWER` | `false` | Set to `true` or `1` to keep saved connection credentials on the server and disable password viewing, password-inclusive copying, and secret sync exports |
     | `DBX_DATA_DIR` | `/app/data` | Persistent data directory |
     | `DBX_PORT` | `4224` | Container listen port |
     | `DBX_PUBLIC_BASE_PATH` | `/` | Deploy below a subpath, such as `/dbx` |
 
+    With password viewing disabled, existing connections continue to use credentials stored on the server. Password fields show a fixed placeholder; leaving them unchanged preserves the saved value, and entering a new value replaces it. Changing a connection target while reusing hidden credentials is rejected; enter replacement credentials instead. Restart the server and reload the browser after changing this variable.
+
     Then open `http://localhost:4224`.
 
     `deploy/docker-compose.yml` builds the current checkout. To deploy a published image, use `deploy/docker-compose.release.yml`: