feat(httpapi): harden control plane and speed up prefix refresh

Очередь job получила lease и fencing, телеметрия и прогресс deploy сохраняются, ревизия пишет manifest входов. Обновление префиксов не переписывает неизменённый снимок, большие наборы идут через COPY, а устаревшая ревизия не попадает в deploy. Бандл ноды кэшируется, prune и постановка job больше не держат горячий путь.

Co-authored-by: Cursor <[email protected]>

scripts/ci/postgres-integration.sh

@@ -0,0 +1,80 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+: "${EVOBGP_TEST_DATABASE_URL:?PostgreSQL integration tests require EVOBGP_TEST_DATABASE_URL}"
+
+assert_passes() {
+  local result_file="$1" package="$2" label="$3"
+  shift 3
+  python3 - "$result_file" "$package" "$label" "$@" <<'PY'
+import json
+import sys
+
+path, package, label = sys.argv[1:4]
+required = set(sys.argv[4:])
+passed = set()
+skipped = set()
+failed = set()
+package_passed = False
+unexpected_packages = set()
+with open(path, encoding="utf-8") as events:
+    for line in events:
+        event = json.loads(line)
+        if event.get("Package") != package:
+            unexpected_packages.add(event.get("Package", "<none>"))
+            continue
+        action = event.get("Action")
+        test = event.get("Test")
+        if action == "pass" and test:
+            passed.add(test)
+        elif action == "skip" and test:
+            skipped.add(test)
+        elif action == "fail":
+            failed.add(test or "<package>")
+        elif action == "pass" and not test:
+            package_passed = True
+missing = required - passed
+if failed or skipped or missing or unexpected_packages or not package_passed:
+    raise SystemExit(
+        f"{label}: required PostgreSQL tests did not pass: "
+        f"missing={sorted(missing)}, skipped={sorted(skipped)}, "
+        f"failed={sorted(failed)}, unexpected_packages={sorted(unexpected_packages)}, "
+        f"package_passed={package_passed}"
+    )
+print(f"{label}: all {len(required)} required PostgreSQL integration tests passed, 0 skipped")
+PY
+}
+
+db_result="$(mktemp)"
+repo_result="$(mktemp)"
+trap 'rm -f "$db_result" "$repo_result"' EXIT
+
+# Run packages serially against the ephemeral database. Migration concurrency is
+# exercised explicitly inside the isolated-schema DB tests.
+go test -race -count=1 -p 1 -json -run '^TestPostgresMigration.*Integration$' ./internal/db | tee "$db_result"
+assert_passes "$db_result" evobgp/internal/db 'DB migrations' \
+  TestPostgresMigrationsIntegration \
+  TestPostgresMigrationConcurrentApplyIntegration \
+  TestPostgresMigrationRollbackIntegration \
+  TestPostgresMigrationIdempotentIntegration \
+  TestPostgresMigrationLockCancellationIntegration
+go test -race -count=1 -p 1 -json -run 'Integration$' ./internal/repository | tee "$repo_result"
+assert_passes "$repo_result" evobgp/internal/repository 'Repository' \
+  TestPostgresPingIntegration \
+  TestPostgresModuleCRUDIntegration \
+  TestPostgresFirewallClientCreateAndGetIntegration \
+  TestEnsurePrefixSnapshotFillsEmptyExistingIntegration \
+  TestEnsurePrefixSnapshotIdempotentIntegration \
+  TestPostgresPruneUnreferencedPrefixSnapshotsIntegration \
+  TestPostgresEstimateRevisionPruneIntegration \
+  TestJobAuditClaimAndRestartIntegration \
+  TestJobAuditIdempotencyRowIntegration \
+  TestJobQueueRetryBoundsAndFailureIntegration \
+  TestJobQueueFreshSeedIntegration \
+  TestDeploymentLeaseGenerationAndRestartIntegration \
+  TestTelemetryLeaseSnapshotAndDiscoveryIntegration \
+  TestPostgresModuleSnapshotAtomicRMWMaxPoolOneIntegration \
+  TestPostgresModuleSnapshotAdvisoryWaitCancellationIntegration \
+  TestPostgresModuleSnapshotPartialWriteRollbackIntegration \
+  TestPostgresModuleSnapshotKilledBackendRollsBackIntegration \
+  TestPostgresModuleSnapshotMethodsRespectCancellationIntegration