feat(pages): 支持 Remote 部署源同步

新增部署源配置与运行态模型、安全下载、租约续期、原子激活和失败补偿。

接入内部任务与脱敏前端交互，并阻止数据库 Trace 和日志展开敏感查询参数。

internal/db/postgres.go

@@ -57,13 +57,10 @@ func initSQLite() {
 
 	// Trace 注入
 	if err = db.Use(
-		tracing.NewPlugin(
-			tracing.WithoutMetrics(),
-			tracing.WithAttributes(
-				attribute.String("db.instance", sqlitePath),
-				attribute.String("db.system", "SQLite"),
-			),
-		),
+		newGORMTracingPlugin([]attribute.KeyValue{
+			attribute.String("db.instance", sqlitePath),
+			attribute.String("db.system", "SQLite"),
+		}),
 	); err != nil {
 		log.Fatalf("[SQLite] init trace failed: %v\n", err)
 	}
@@ -98,15 +95,12 @@ func initPostgres() {
 
 	// Trace 注入
 	if err = db.Use(
-		tracing.NewPlugin(
-			tracing.WithoutMetrics(),
-			tracing.WithAttributes(
-				attribute.String("db.instance", dbConfig.Database),
-				attribute.String("db.ip", dbConfig.Host),
-				attribute.String("server.address", net.JoinHostPort(dbConfig.Host, strconv.Itoa(dbConfig.Port))),
-				attribute.String("db.system", "PostgreSQL"),
-			),
-		),
+		newGORMTracingPlugin([]attribute.KeyValue{
+			attribute.String("db.instance", dbConfig.Database),
+			attribute.String("db.ip", dbConfig.Host),
+			attribute.String("server.address", net.JoinHostPort(dbConfig.Host, strconv.Itoa(dbConfig.Port))),
+			attribute.String("db.system", "PostgreSQL"),
+		}),
 	); err != nil {
 		log.Fatalf("[PostgreSQL] init trace failed: %v\n", err)
 	}
@@ -160,6 +154,17 @@ func initPostgres() {
 
 }
 
+// newGORMTracingPlugin 构造数据库链路追踪插件。查询参数只保留占位符，避免凭据等绑定值进入 Span。
+func newGORMTracingPlugin(attrs []attribute.KeyValue, extraOptions ...tracing.Option) gorm.Plugin {
+	options := []tracing.Option{
+		tracing.WithoutMetrics(),
+		tracing.WithoutQueryVariables(),
+		tracing.WithAttributes(attrs...),
+	}
+	options = append(options, extraOptions...)
+	return tracing.NewPlugin(options...)
+}
+
 // buildDSN 构建 PostgreSQL DSN
 func buildDSN(host string, port int, username, password string) string {
 	cfg := config.Config.Database