refactor(repository): 收敛 model/repository 分层为唯一持久化入口

将 OpenFlare 与平台业务的数据访问从 model 与 apps 直连迁入 repository，
model 仅保留实体与无 IO 规则；补充 code-check 架构守卫与开发规范。

internal/model/openflare_pages_cleanup.go

@@ -4,19 +4,16 @@
 package model
 
 import (
-	"context"
-	"errors"
 	"time"
-
-	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
 )
 
 const (
 	// PagesOrphanUploadCandidateLimit bounds one delayed Pages upload cleanup pass.
 	PagesOrphanUploadCandidateLimit = 100
-
-	pagesOrphanMarkerPredicatePostgres = "w_uploads.metadata #>> '{extra,pages_ingest_marker}' = ?"
-	pagesOrphanMarkerPredicateSQLite   = "CASE WHEN json_valid(w_uploads.metadata) THEN json_extract(w_uploads.metadata, '$.extra.pages_ingest_marker') ELSE NULL END = ?"
+	// PagesOrphanMarkerPredicatePostgres is the Postgres JSON marker match SQL fragment.
+	PagesOrphanMarkerPredicatePostgres = "w_uploads.metadata #>> '{extra,pages_ingest_marker}' = ?"
+	// PagesOrphanMarkerPredicateSQLite is the SQLite JSON marker match SQL fragment.
+	PagesOrphanMarkerPredicateSQLite = "CASE WHEN json_valid(w_uploads.metadata) THEN json_extract(w_uploads.metadata, '$.extra.pages_ingest_marker') ELSE NULL END = ?"
 )
 
 // PagesOrphanUploadCandidateQuery describes the fail-closed SQL candidate set
@@ -27,49 +24,3 @@ type PagesOrphanUploadCandidateQuery struct {
 	Marker        string
 	CreatedBefore time.Time
 }
-
-// ListPagesOrphanUploadCandidates returns at most 100 unreferenced, isolated
-// Pages V2 upload records. Callers must still lock and recheck every condition
-// before deleting a candidate.
-func ListPagesOrphanUploadCandidates(
-	ctx context.Context,
-	input PagesOrphanUploadCandidateQuery,
-) ([]Upload, error) {
-	if input.SystemUserID == 0 || input.UploadType == "" || input.Marker == "" || input.CreatedBefore.IsZero() {
-		return nil, errors.New("invalid pages orphan upload candidate query")
-	}
-	markerPredicate, err := pagesOrphanMarkerPredicate(db.DB(ctx).Name())
-	if err != nil {
-		return nil, err
-	}
-
-	deploymentTable := (PagesDeployment{}).TableName()
-	uploadTable := (Upload{}).TableName()
-	var candidates []Upload
-	err = db.DB(ctx).
-		Model(&Upload{}).
-		Where(uploadTable+".status = ?", UploadStatusUsed).
-		Where(uploadTable+".user_id = ?", input.SystemUserID).
-		Where(uploadTable+".type = ?", input.UploadType).
-		Where(uploadTable+".created_at < ?", input.CreatedBefore).
-		Where(markerPredicate, input.Marker).
-		Where("NOT EXISTS (SELECT 1 FROM " + deploymentTable + " WHERE " + deploymentTable + ".upload_id = " + uploadTable + ".id)").
-		Order(uploadTable + ".id ASC").
-		Limit(PagesOrphanUploadCandidateLimit).
-		Find(&candidates).Error
-	if err != nil {
-		return nil, err
-	}
-	return candidates, nil
-}
-
-func pagesOrphanMarkerPredicate(dialect string) (string, error) {
-	switch dialect {
-	case "postgres":
-		return pagesOrphanMarkerPredicatePostgres, nil
-	case "sqlite":
-		return pagesOrphanMarkerPredicateSQLite, nil
-	default:
-		return "", errors.New("unsupported database dialect for Pages orphan cleanup")
-	}
-}