fix(migration): 079 建冻结幂等索引前先去重历史重复冻结并退还多冻押金

生产首跑 079 在 uniq_worker_wallet_ledgers_consignment_publish_freeze
索引上 23505：历史存在同提报单两条 consignment_publish 冻结流水
（如提报单 5），正是该索引要防的二次冻结缺陷的脏数据产物。

与 079 处理重复绑定工单同套路——先清数据再加约束：
- 每组（worker+提报单）保留最早一条冻结流水，多余行仅改 payload
  标记 consignment_publish_superseded（移出押金口径与索引范围，原行留审计）
- 多冻的钱退还钱包：退额 = LEAST(多冻总额, 冻结池实有)，绝不无中生有；
  写 deposit_release 修正流水（kind=consignment_publish_dedup_refund）
- 同一打手多条多余流水先按钱包聚合再退，避免 UPDATE..FROM 漏退
- 再建幂等索引

已在一次性 Postgres 完整复现生产路径验证：078+脏数据 → 079/080 迁移
成功、钱包退回多冻 ¥20、索引生效拦截第三次冻结

apps/backend/src/db/migrations/079_drop_consignment_collect_links.sql

@@ -96,7 +96,85 @@ CREATE UNIQUE INDEX IF NOT EXISTS uniq_consignment_inventories_bound_work_order
 
 -- 5) 寄卖发布押金的冻结核销行幂等键：同一提报单只能有一笔发布冻结，
 --    防止未来任何绕过"先读台账再冻结"约定的调用方重复扣款。
+--    生产库存在历史重复冻结（发布链路二次冻结缺陷的产物，如提报单 5 有两条冻结流水），
+--    直接建索引会 23505 失败：先与上面"重复绑定工单"同套路清理——保留每组最早一条冻结流水，
+--    多余流水退还多冻的钱（退额 = LEAST(多冻总额, 冻结池实有)，绝不无中生有）并写修正流水，
+--    仅改 payload 标记 superseded（移出押金口径与索引范围，原行保留可审计），再建索引。
+WITH ranked_freezes AS (
+  SELECT
+    id,
+    ROW_NUMBER() OVER (
+      PARTITION BY worker_id, payload_json ->> 'consignmentSubmissionId'
+      ORDER BY id ASC
+    ) AS rn
+  FROM worker_wallet_ledgers
+  WHERE ledger_type = 'deposit_freeze'
+    AND COALESCE(payload_json ->> 'kind', '') = 'consignment_publish'
+),
+superseded_freezes AS (
+  UPDATE worker_wallet_ledgers
+  SET
+    payload_json = payload_json || jsonb_build_object(
+      'kind', 'consignment_publish_superseded',
+      'supersededBy', '079_consignment_publish_freeze_dedup',
+      'supersededReason', '同一提报单重复冻结，多余一笔已退还并移出押金口径'
+    )
+  WHERE id IN (SELECT id FROM ranked_freezes WHERE rn > 1)
+  RETURNING id, worker_id, amount
+),
+-- 同一打手可能有多条多余流水：先按钱包聚合，避免 UPDATE ... FROM 只吃到其中一条
+superseded_totals AS (
+  SELECT
+    worker_id,
+    SUM(ABS(amount)) AS dup_frozen_fen,
+    jsonb_agg(id) AS source_ledger_ids
+  FROM superseded_freezes
+  GROUP BY worker_id
+),
+refund_plan AS (
+  SELECT
+    st.worker_id,
+    LEAST(st.dup_frozen_fen, COALESCE(w.frozen_deposit_amount, 0)) AS refund_fen,
+    COALESCE(w.available_amount, 0)
+      + LEAST(st.dup_frozen_fen, COALESCE(w.frozen_deposit_amount, 0)) AS available_after,
+    COALESCE(w.frozen_deposit_amount, 0)
+      - LEAST(st.dup_frozen_fen, COALESCE(w.frozen_deposit_amount, 0)) AS frozen_after,
+    st.source_ledger_ids
+  FROM superseded_totals st
+  LEFT JOIN worker_wallets w ON w.worker_id = st.worker_id
+),
+applied_refunds AS (
+  UPDATE worker_wallets w
+  SET
+    available_amount = rp.available_after,
+    frozen_deposit_amount = rp.frozen_after,
+    updated_at = NOW()
+  FROM refund_plan rp
+  WHERE w.worker_id = rp.worker_id
+  RETURNING w.worker_id
+)
+INSERT INTO worker_wallet_ledgers (
+  worker_id, ledger_type, amount, balance_after, frozen_after,
+  related_work_order_id, note, payload_json, created_at
+)
+SELECT
+  rp.worker_id,
+  'deposit_release',
+  rp.refund_fen,
+  rp.available_after,
+  rp.frozen_after,
+  NULL,
+  '重复冻结押金自动退还（079 迁移去重）',
+  jsonb_build_object(
+    'kind', 'consignment_publish_dedup_refund',
+    'sourceLedgerIds', rp.source_ledger_ids
+  ),
+  NOW()
+FROM refund_plan rp
+JOIN applied_refunds ar ON ar.worker_id = rp.worker_id
+WHERE rp.refund_fen > 0;
+
 CREATE UNIQUE INDEX IF NOT EXISTS uniq_worker_wallet_ledgers_consignment_publish_freeze
   ON worker_wallet_ledgers ((payload_json ->> 'consignmentSubmissionId'))
   WHERE ledger_type = 'deposit_freeze'
-    AND payload_json ->> 'kind' = 'consignment_publish';
+    AND COALESCE(payload_json ->> 'kind', '') = 'consignment_publish';