feat(httpapi): harden control plane and speed up prefix refresh

Очередь job получила lease и fencing, телеметрия и прогресс deploy сохраняются, ревизия пишет manifest входов. Обновление префиксов не переписывает неизменённый снимок, большие наборы идут через COPY, а устаревшая ревизия не попадает в deploy. Бандл ноды кэшируется, prune и постановка job больше не держат горячий путь.

Co-authored-by: Cursor <cursoragent@cursor.com>

internal/httpapi/bootstrap.go

@@ -7,9 +7,9 @@ import (
 	"time"
 
 	"evobgp/internal/db"
-	"evobgp/internal/httpclient"
 	"evobgp/internal/jobs"
 	"evobgp/internal/observability"
+	"evobgp/internal/pipeline"
 	"evobgp/internal/repository"
 	"evobgp/internal/store"
 
@@ -18,7 +18,7 @@ import (
 
 // NewCDNHTTPClient returns the shared HTTP client for CDN and preview fetches (PERF-02 / ERR-03).
 func NewCDNHTTPClient() *http.Client {
-	return httpclient.New(httpclient.DefaultTimeout)
+	return pipeline.NewCDNHTTPClient()
 }
 
 // BootstrapWorkers opens the same store.Backend and jobs.Registry as New (without HTTP or bundle keys).
@@ -50,46 +50,15 @@ func BootstrapWorkers(ctx context.Context, opts Options) (store.Backend, *jobs.R
 		backend = mem
 	}
 
-	cdnHTTP := NewCDNHTTPClient()
-	wk := &jobs.Worker{Store: backend, PgPool: pool, HTTPClient: cdnHTTP}
+	// Configured DoH profiles and RIPE service overrides retain the previous
+	// general HTTP/HTTPS transport, including explicitly configured private
+	// endpoints. CDN calls independently secure this client in UpstreamHTTPDo.
+	workerHTTP := pipeline.NewPipelineHTTPClient()
+	wk := &jobs.Worker{Store: backend, PgPool: pool, HTTPClient: workerHTTP}
 	reg := jobs.NewRegistry(wk.Process)
 	wk.Registry = reg
 	if pool != nil {
-		audit := repository.NewJobAuditWriter(pool)
-		jobMeta := func(j *jobs.Job) map[string]any {
-			if j == nil {
-				return nil
-			}
-			st := j.Snapshot()
-			meta, _ := st["meta"].(map[string]any)
-			return meta
-		}
-		reg.SetPersistHooks(
-			func(j *jobs.Job) {
-				if j == nil {
-					return
-				}
-				audit.UpsertQueued(context.Background(), j.TenantID, j.ID, j.Kind, j.IdempotencyKey, j.ModuleID, jobMeta(j))
-			},
-			func(j *jobs.Job) {
-				if j == nil {
-					return
-				}
-				audit.UpsertRunning(context.Background(), j.TenantID, j.ID, j.Kind, j.IdempotencyKey, jobMeta(j))
-			},
-			func(j *jobs.Job) {
-				if j == nil {
-					return
-				}
-				st := j.Snapshot()
-				status, _ := st["status"].(string)
-				var errMsg *string
-				if e, ok := st["error"].(string); ok && e != "" {
-					errMsg = &e
-				}
-				audit.MarkTerminal(context.Background(), j.TenantID, j.ID, status, errMsg, time.Now().UTC())
-			},
-		)
+		reg.UseDurableQueue(backend)
 	}
 	observability.RegisterStoreBackend(backend)
 	return backend, reg, pool, nil