后端与全仓代码质量清理（golangci 扩展集 · 测试质量 · 并发安全 · 文档同步）

代码质量全量清理，零行为变化：golangci 扩展集 13 类 linter（gosec/modernize/perfsprint/canonicalheader/usestdlibvars/wastedassign/intrange/errorlint/forcetypeassert/recvcheck/exhaustive/unparam）全量修复，测试代码质量（testifylint/thelper/usetesting）25→0，frpc 进程生命周期真 bug（进程组击杀）、全仓 go test -race 6 类数据竞争（含 1 个生产竞争）、SPDX license 头补齐 131 文件、前端测试套件 next-intl 迁移后 44 失败→全绿、过期 swagger 文档重新生成、pnpm-workspace 构建审批。

Experiments: #2-#17, #18, #20, #21, #23
Metric: total_issues 108 → 8 (-92.6%)

pkg/pagesarchive/inspect.go

@@ -137,7 +137,7 @@ func scanTarFamilyAt(
 	enforceLimits bool,
 ) (*measuredArchive, error) {
 	if size < 0 {
-		return nil, fmt.Errorf("invalid pages package size")
+		return nil, errors.New("invalid pages package size")
 	}
 	tarReader, closeReader, err := openTarFamilyReader(io.NewSectionReader(ra, 0, size), format)
 	if err != nil {
@@ -154,7 +154,7 @@ func scanTarReader(tarReader *tar.Reader, limits Limits, enforceLimits bool) (*m
 	measured := &measuredArchive{files: make([]measuredFile, 0)}
 	for {
 		header, err := tarReader.Next()
-		if err == io.EOF {
+		if errors.Is(err, io.EOF) {
 			break
 		}
 		if err != nil {
@@ -183,7 +183,7 @@ func scanTarReader(tarReader *tar.Reader, limits Limits, enforceLimits bool) (*m
 
 func buildMeasuredManifest(measured *measuredArchive, opts InspectOptions) (*Manifest, error) {
 	if measured == nil || measured.fileCount == 0 {
-		return nil, fmt.Errorf("pages package is empty")
+		return nil, errors.New("pages package is empty")
 	}
 	targetEntryPath, err := resolveTargetEntryPath(opts.RootDir, opts.EntryFile)
 	if err != nil {
@@ -231,7 +231,7 @@ func prepareMeasuredFile(measured *measuredArchive, normalizedPath string, decla
 	}
 	remaining := limits.MaxTotalBytes - measured.totalSize
 	if remaining < 0 || declaredSize > uint64(remaining) { //nolint:gosec // remaining is checked non-negative
-		return fmt.Errorf("pages extracted size exceeds limit")
+		return errors.New("pages extracted size exceeds limit")
 	}
 	return nil
 }
@@ -295,6 +295,8 @@ func isTarFamily(format Format) bool {
 	switch format {
 	case FormatTar, FormatTarGz, FormatTarXz, FormatTarBz2:
 		return true
+	case FormatZip, FormatSevenZip:
+		return false
 	default:
 		return false
 	}