fix(billing): 封住发布前计费竞态

阻止上游提交状态不明的任务被租约接管后重复执行，并为人工复核保留可操作的结算记录。

将生产提交绑定到当前估价签名，统一复用预处理快照，并补强规则形状、定点溢出与历史规则兼容校验。

已通过 PostgreSQL 16 集成测试、Go 全量测试与静态检查、前端测试与构建、OpenAPI、依赖审计、镜像、迁移、流水线和 SemVer 门禁。

apps/api/internal/store/postgres.go

@@ -59,6 +59,8 @@ var (
 	ErrIdempotencyKeyReused          = errors.New("idempotency key was reused for a different request")
 	ErrTaskExecutionLeaseUnavailable = errors.New("task execution lease is unavailable")
 	ErrTaskExecutionLeaseLost        = errors.New("task execution lease was lost")
+	ErrTaskExecutionFinished         = errors.New("task execution already finished")
+	ErrTaskExecutionManualReview     = errors.New("task execution requires manual review")
 	ErrProtectedDefault              = errors.New("protected default resource cannot be deleted")
 	ErrUserAlreadyExists             = errors.New("user already exists")
 	ErrWeakPassword                  = errors.New("password must be at least 8 characters")