perf(acceptance): 使用多钱包身份分片模拟并发

单一验收钱包会把预留和结算串行化，掩盖双节点 Worker 的真实吞吐。验收现在幂等准备 32 个隔离身份和钱包，按请求轮询 API Key，并在 Run 配置中登记允许的 Key/User 身份对；密钥仅经 stdin 传给集群内压测进程。\n\n仍保留真实账务、候选权限、回调、重复扣费和强杀恢复校验。\n\n验证：Go 全量测试、临时 PostgreSQL 集成测试、go vet、OpenAPI 生成、迁移安全检查、bash -n、ShellCheck。

apps/api/internal/store/acceptance_integration_test.go

@@ -45,6 +45,9 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 		EmulatorBaseURL:   "http://acceptance-emulator:8090",
 		CallbackURL:       "http://acceptance-emulator:8090/callbacks",
 		CapacityProfile:   "P24",
+		Config: map[string]any{"participants": []any{
+			map[string]any{"apiKeyId": "acceptance-shard-key", "userId": "acceptance-shard-user"},
+		}},
 	})
 	if err != nil {
 		t.Fatalf("create acceptance run: %v", err)
@@ -70,6 +73,14 @@ WHERE setting_key = $1`, SystemSettingGatewayTrafficMode)
 	if authorizedRunID, err := db.AuthorizeAcceptanceTask(ctx, run.ID, token, user); err != nil || authorizedRunID != run.ID {
 		t.Fatalf("authorize acceptance task run=%q err=%v", authorizedRunID, err)
 	}
+	shardUser := &auth.User{ID: "acceptance-shard-user", APIKeyID: "acceptance-shard-key"}
+	if authorizedRunID, err := db.AuthorizeAcceptanceTask(ctx, run.ID, token, shardUser); err != nil || authorizedRunID != run.ID {
+		t.Fatalf("authorize acceptance shard run=%q err=%v", authorizedRunID, err)
+	}
+	unpairedShard := &auth.User{ID: "acceptance-shard-user", APIKeyID: "acceptance-api-key"}
+	if _, err := db.AuthorizeAcceptanceTask(ctx, run.ID, token, unpairedShard); !errors.Is(err, ErrAcceptanceNotAuthorized) {
+		t.Fatalf("unpaired acceptance shard error=%v, want unauthorized", err)
+	}
 	if baseURL, credential, err := db.AcceptanceCandidateOverride(ctx, run.ID); err != nil ||
 		baseURL != "http://acceptance-emulator:8090" || credential == "" || credential == token {
 		t.Fatalf("candidate override base=%q credential=%q err=%v", baseURL, credential, err)