fix(worker): 防止事务泄漏并恢复滞留队列

为 PostgreSQL 连接增加可配置的事务空闲与锁等待超时，并在请求取消或 Worker 退出后使用独立有界上下文回滚事务。\n\n恢复过期任务时按批次使用 SKIP LOCKED，周期重建缺失或终态 River Job；锁等待超时只在确认尚未提交上游时安全重排，避免重复执行和重复结算。\n\n验证：完整 Go 测试、go vet、生产 Kustomize 渲染、gofmt 与 git diff --check 均通过。

apps/api/internal/store/security_events.go

@@ -13,7 +13,6 @@ import (
 const (
 	securityEventTransactionLockTimeout = 5 * time.Second
 	securityEventTransactionIdleTimeout = 15 * time.Second
-	transactionRollbackTimeout          = 5 * time.Second
 )
 
 func (s *Store) beginSecurityEventTransaction(ctx context.Context) (pgx.Tx, error) {
@@ -38,12 +37,7 @@ func (s *Store) beginSecurityEventTransaction(ctx context.Context) (pgx.Tx, erro
 }
 
 func rollbackSecurityEventTransaction(tx pgx.Tx) {
-	if tx == nil {
-		return
-	}
-	ctx, cancel := context.WithTimeout(context.Background(), transactionRollbackTimeout)
-	defer cancel()
-	_ = tx.Rollback(ctx)
+	rollbackTransaction(tx)
 }
 
 type ApplySessionRevokedInput struct {