perf(acceptance): 使用多钱包身份分片模拟并发

单一验收钱包会把预留和结算串行化，掩盖双节点 Worker 的真实吞吐。验收现在幂等准备 32 个隔离身份和钱包，按请求轮询 API Key，并在 Run 配置中登记允许的 Key/User 身份对；密钥仅经 stdin 传给集群内压测进程。\n\n仍保留真实账务、候选权限、回调、重复扣费和强杀恢复校验。\n\n验证：Go 全量测试、临时 PostgreSQL 集成测试、go vet、OpenAPI 生成、迁移安全检查、bash -n、ShellCheck。

apps/api/internal/store/acceptance.go

@@ -583,17 +583,35 @@ func (s *Store) AuthorizeAcceptanceTask(ctx context.Context, runID string, token
 		return "", ErrAcceptanceNotAuthorized
 	}
 	var activeRunID, apiKeyID, userID, tokenHash, status string
+	var participantAuthorized bool
 	err = s.pool.QueryRow(ctx, `
-SELECT id::text, api_key_id, user_id, token_sha256, status
+SELECT id::text, api_key_id, user_id, token_sha256, status,
+       (
+         (api_key_id = $2 AND user_id = $3)
+         OR EXISTS (
+           SELECT 1
+           FROM jsonb_array_elements(
+             CASE
+               WHEN jsonb_typeof(config->'participants') = 'array'
+                 THEN config->'participants'
+               ELSE '[]'::jsonb
+             END
+           ) participant
+           WHERE participant->>'apiKeyId' = $2
+             AND participant->>'userId' = $3
+         )
+       )
 FROM gateway_acceptance_runs
-WHERE id = $1::uuid`, runID).Scan(&activeRunID, &apiKeyID, &userID, &tokenHash, &status)
+WHERE id = $1::uuid`, runID, strings.TrimSpace(user.APIKeyID), strings.TrimSpace(user.ID)).Scan(
+		&activeRunID, &apiKeyID, &userID, &tokenHash, &status, &participantAuthorized,
+	)
 	if err != nil {
 		if errors.Is(err, pgx.ErrNoRows) {
 			return "", ErrAcceptanceNotAuthorized
 		}
 		return "", err
 	}
-	if status != "running" || apiKeyID != strings.TrimSpace(user.APIKeyID) || userID != strings.TrimSpace(user.ID) ||
+	if status != "running" || !participantAuthorized ||
 		subtle.ConstantTimeCompare([]byte(tokenHash), []byte(acceptanceTokenSHA256(token))) != 1 {
 		return "", ErrAcceptanceNotAuthorized
 	}

apps/api/internal/store/acceptance_integration_test.go

@@ -45,6 +45,9 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 		EmulatorBaseURL:   "http://acceptance-emulator:8090",
 		CallbackURL:       "http://acceptance-emulator:8090/callbacks",
 		CapacityProfile:   "P24",
+		Config: map[string]any{"participants": []any{
+			map[string]any{"apiKeyId": "acceptance-shard-key", "userId": "acceptance-shard-user"},
+		}},
 	})
 	if err != nil {
 		t.Fatalf("create acceptance run: %v", err)
@@ -70,6 +73,14 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 	if authorizedRunID, err := db.AuthorizeAcceptanceTask(ctx, run.ID, token, user); err != nil || authorizedRunID != run.ID {
 		t.Fatalf("authorize acceptance task run=%q err=%v", authorizedRunID, err)
 	}
+	shardUser := &auth.User{ID: "acceptance-shard-user", APIKeyID: "acceptance-shard-key"}
+	if authorizedRunID, err := db.AuthorizeAcceptanceTask(ctx, run.ID, token, shardUser); err != nil || authorizedRunID != run.ID {
+		t.Fatalf("authorize acceptance shard run=%q err=%v", authorizedRunID, err)
+	}
+	unpairedShard := &auth.User{ID: "acceptance-shard-user", APIKeyID: "acceptance-api-key"}
+	if _, err := db.AuthorizeAcceptanceTask(ctx, run.ID, token, unpairedShard); !errors.Is(err, ErrAcceptanceNotAuthorized) {
+		t.Fatalf("unpaired acceptance shard error=%v, want unauthorized", err)
+	}
 	if baseURL, credential, err := db.AcceptanceCandidateOverride(ctx, run.ID); err != nil ||
 		baseURL != "http://acceptance-emulator:8090" || credential == "" || credential == token {
 		t.Fatalf("candidate override base=%q credential=%q err=%v", baseURL, credential, err)