后端与全仓代码质量清理（golangci 扩展集 · 测试质量 · 并发安全 · 文档同步）

代码质量全量清理，零行为变化：golangci 扩展集 13 类 linter（gosec/modernize/perfsprint/canonicalheader/usestdlibvars/wastedassign/intrange/errorlint/forcetypeassert/recvcheck/exhaustive/unparam）全量修复，测试代码质量（testifylint/thelper/usetesting）25→0，frpc 进程生命周期真 bug（进程组击杀）、全仓 go test -race 6 类数据竞争（含 1 个生产竞争）、SPDX license 头补齐 131 文件、前端测试套件 next-intl 迁移后 44 失败→全绿、过期 swagger 文档重新生成、pnpm-workspace 构建审批。

Experiments: #2-#17, #18, #20, #21, #23
Metric: total_issues 108 → 8 (-92.6%)

internal/apps/openflare/integration/core_chain_test.go

@@ -171,7 +171,7 @@ func TestCoreChainMigrationFlow(t *testing.T) {
 		zoneDomains := data["zone_domains"].([]any)
 		assert.Len(t, zoneDomains, 1)
 		assert.Equal(t, "core-chain.example.com", zoneDomains[0].(map[string]any)["domain"])
-		assert.Equal(t, float64(originID), data["origin_id"])
+		assert.InDelta(t, float64(originID), data["origin_id"], 1e-9)
 		assert.Equal(t, "http://origin.core-chain.internal:8080", data["origin_url"])
 	})
 
@@ -257,7 +257,7 @@ func TestCoreChainMigrationFlow(t *testing.T) {
 
 		listResp := requireAPIOK(t, listRec)
 		listData := unmarshalAPIMap(t, listResp.Data)
-		assert.Equal(t, float64(1), listData["total"])
+		assert.InDelta(t, float64(1), listData["total"], 1e-9)
 
 		rows, ok := listData["rows"].([]any)
 		require.True(t, ok)
@@ -278,10 +278,10 @@ func TestCoreChainMigrationFlow(t *testing.T) {
 		require.Len(t, nodes, 1)
 		nodeView, ok := nodes[0].(map[string]any)
 		require.True(t, ok)
-		assert.Equal(t, float64(nodeID), nodeView["id"])
+		assert.InDelta(t, float64(nodeID), nodeView["id"], 1e-9)
 		assert.Equal(t, nodePublicID, nodeView["node_id"])
 		assert.Equal(t, "success", nodeView["latest_apply_result"])
 		assert.Equal(t, configChecksum, nodeView["latest_apply_checksum"])
-		assert.Equal(t, float64(2), nodeView["latest_support_file_count"])
+		assert.InDelta(t, float64(2), nodeView["latest_support_file_count"], 1e-9)
 	})
 }

internal/apps/openflare/integration/security_test.go

@@ -119,7 +119,7 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 		assert.NotZero(t, ruleGroupID)
 		assert.Equal(t, "edge-security", data["name"])
 		assert.Equal(t, false, data["is_global"])
-		assert.Equal(t, float64(1), data["revision"])
+		assert.InDelta(t, float64(1), data["revision"], 1e-9)
 		assert.NotNil(t, data["graph"])
 	})
 
@@ -161,7 +161,7 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 
 		resp := requireAPIOK(t, rec)
 		data := unmarshalAPIMap(t, resp.Data)
-		assert.Equal(t, float64(ruleGroupID), data["id"])
+		assert.InDelta(t, float64(ruleGroupID), data["id"], 1e-9)
 		assert.Equal(t, "edge-security", data["name"])
 	})
 
@@ -244,12 +244,12 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 
 		resp := requireAPIOK(t, rec)
 		data := unmarshalAPIMap(t, resp.Data)
-		assert.Equal(t, float64(proxyRouteID), data["route_id"])
+		assert.InDelta(t, float64(proxyRouteID), data["route_id"], 1e-9)
 
 		appliedIDs, ok := data["applied_ids"].([]any)
 		require.True(t, ok)
 		require.Len(t, appliedIDs, 1)
-		assert.Equal(t, float64(ruleGroupID), appliedIDs[0])
+		assert.InDelta(t, float64(ruleGroupID), appliedIDs[0], 1e-9)
 	})
 
 	t.Run("verify site rule groups binding", func(t *testing.T) {
@@ -272,7 +272,7 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 		require.Len(t, appliedGroups, 1)
 		group, ok := appliedGroups[0].(map[string]any)
 		require.True(t, ok)
-		assert.Equal(t, float64(ruleGroupID), group["id"])
+		assert.InDelta(t, float64(ruleGroupID), group["id"], 1e-9)
 	})
 
 	t.Run("create TLS certificate with PEM", func(t *testing.T) {
@@ -319,7 +319,7 @@ func TestSecurityWAFTLSMigrationFlow(t *testing.T) {
 		domainID = uint(data["id"].(float64))
 		assert.NotZero(t, domainID)
 		assert.Equal(t, "security.example.com", data["domain"])
-		assert.Equal(t, float64(certID), data["cert_id"])
+		assert.InDelta(t, float64(certID), data["cert_id"], 1e-9)
 	})
 
 	t.Run("create DNS account", func(t *testing.T) {