```

feat(feishu): 添加飞书入站事件inbox和混合数据库协调功能

- 实现飞书入站事件持久化inbox机制，支持状态管理、租约锁定和重试退避
- 添加混合数据库基线协调工具，确保平台PostgreSQL结构安全对齐
- 增加运行组件心跳检测和readiness就绪检查机制
- 实现app_ticket事件的安全轮换和验证处理
- 添加生产环境运行编排和fail-closed安全机制
- 支持webhook快速确认和长连接独立进程处理
- 完善个人数据擦除时的待处理事件清理功能
```

tests/test_v2_hardening.py

@@ -28,13 +28,16 @@ from app.tools import init_db
 def _production_settings(**overrides: object) -> Settings:
     values: dict[str, object] = {
         "app_env": "production",
-        "database_url": "postgresql+psycopg://app:secret@db/app",
-        "api_key": "service-key",
-        "audit_api_key": "audit-key",
+        "database_url": (
+            "postgresql+psycopg://app:runtime-database-password-2026@db/app"
+        ),
+        "api_key": "runtime-service-key-2026-primary",
+        "audit_api_key": "runtime-audit-key-2026-independent",
         "cors_origins": ["https://internal.example.com"],
         "debug": False,
         "mask_sensitive_responses": True,
         "read_only_mode": True,
+        "feishu_event_transport": "disabled",
     }
     values.update(overrides)
     return Settings(_env_file=None, **values)
@@ -42,7 +45,7 @@ def _production_settings(**overrides: object) -> Settings:
 
 def test_production_keys_must_be_enabled_isolated_and_safe() -> None:
     settings = _production_settings()
-    assert settings.api_key == "service-key"
+    assert settings.api_key == "runtime-service-key-2026-primary"
 
     with pytest.raises(ValueError, match="API_KEY or API_KEYS"):
         _production_settings(
@@ -51,7 +54,7 @@ def test_production_keys_must_be_enabled_isolated_and_safe() -> None:
         )
 
     with pytest.raises(ValueError, match="cannot overlap"):
-        _production_settings(audit_api_key="service-key")
+        _production_settings(audit_api_key="runtime-service-key-2026-primary")
 
     with pytest.raises(ValueError, match="MASK_SENSITIVE_RESPONSES"):
         _production_settings(mask_sensitive_responses=False)