feat(ops): 数据保留清理、CORS 白名单与上传失败回滚

- 新增每日数据保留清理任务:按保留期清空原始报文、删除过期
  事件/审计记录,批量幂等可重跑;067 迁移补齐清理索引并清理
  冗余索引,check-sql-guard 增加防线
- 生产 CORS 改为显式来源白名单(CORS_ALLOWED_ORIGINS),禁用
  通配符,非通配响应补充 Vary: Origin
- 文件上传任一步失败时回滚已上传对象,清理失败记录 warn 日志
- 新增 HTTP/CORS 与 PostgreSQL 集成测试;若干文件仅 prettier 重排

apps/backend/src/services/worker-platform/admin-worker-user-service.ts

@@ -97,7 +97,8 @@ export async function setAdminWorkerPersonalDepositFreeAmount(
 ) {
   const worker = await getRequiredWorker(workerId)
   const rawAmount = payload.depositFreeAmount ?? payload.deposit_free_amount
-  const clearPersonalAmount = rawAmount === null || rawAmount === undefined || String(rawAmount).trim() === ''
+  const clearPersonalAmount =
+    rawAmount === null || rawAmount === undefined || String(rawAmount).trim() === ''
   if (!clearPersonalAmount) {
     const amount = Number(rawAmount)
     if (!Number.isFinite(amount) || amount < 0) {

apps/backend/src/services/worker-platform/worker-permission-utils.ts

@@ -17,8 +17,8 @@ export function resolveWorkerPermissions(worker: WorkerUserRow) {
     personalDepositFreeAmount >= 0
   return {
     // 个人额度是在等级额度基础上的追加额度，两者叠加生效。
-    depositFreeAmount: levelDepositFreeAmount +
-      (hasPersonalDepositFreeAmount ? personalDepositFreeAmount : 0),
+    depositFreeAmount:
+      levelDepositFreeAmount + (hasPersonalDepositFreeAmount ? personalDepositFreeAmount : 0),
     levelDepositFreeAmount,
     personalDepositFreeAmount: hasPersonalDepositFreeAmount ? personalDepositFreeAmount : null,
     maxActiveOrders: normalizePositiveInteger(permission.maxActiveOrders, 1),