feat(deploy): 支持更新脚本自动部署模型转换服务

scripts/test-security-env.sh

@@ -66,6 +66,7 @@ init_security_env "$upgrade_env" upgrade > "$upgrade_log"
 
 assert_min_length "$upgrade_env" "CONFIG_JWT_SECRET" 32
 assert_min_length "$upgrade_env" "WS_AUTH_WS_TICKET_SECRET" 32
+assert_min_length "$upgrade_env" "MODEL_CONVERSION_WORKER_TOKEN" 32
 assert_value "$upgrade_env" "CONFIG_SECURITY_CONFIG_ENCRYPTION_KEY" ""
 assert_value "$upgrade_env" "WS_AUTH_METHODS" "none,bearer,ws_ticket"
 assert_single_key "$upgrade_env" "WS_AUTH_WS_TICKET_SECRET"
@@ -73,7 +74,8 @@ assert_single_key "$upgrade_env" "WS_AUTH_METHODS"
 
 upgrade_jwt="$(read_env_value "$upgrade_env" "CONFIG_JWT_SECRET")"
 upgrade_ws="$(read_env_value "$upgrade_env" "WS_AUTH_WS_TICKET_SECRET")"
-if grep -Fq "$upgrade_jwt" "$upgrade_log" || grep -Fq "$upgrade_ws" "$upgrade_log"; then
+upgrade_worker="$(read_env_value "$upgrade_env" "MODEL_CONVERSION_WORKER_TOKEN")"
+if grep -Fq "$upgrade_jwt" "$upgrade_log" || grep -Fq "$upgrade_ws" "$upgrade_log" || grep -Fq "$upgrade_worker" "$upgrade_log"; then
     fail "security initialization output must not reveal generated secrets"
 fi
 
@@ -87,9 +89,11 @@ preserved_env="$TMP_DIR/preserved.env"
 write_env "$preserved_env" \
     "CONFIG_JWT_SECRET=existing-jwt-secret-that-is-long-enough" \
     "WS_AUTH_WS_TICKET_SECRET=$preserved_secret" \
+    "MODEL_CONVERSION_WORKER_TOKEN=$preserved_secret" \
     "WS_AUTH_METHODS=bearer,ws_ticket"
 init_security_env "$preserved_env" upgrade > "$TMP_DIR/preserved.log"
 assert_value "$preserved_env" "WS_AUTH_WS_TICKET_SECRET" "$preserved_secret"
+assert_value "$preserved_env" "MODEL_CONVERSION_WORKER_TOKEN" "$preserved_secret"
 assert_value "$preserved_env" "WS_AUTH_METHODS" "bearer,ws_ticket"
 
 new_env="$TMP_DIR/new.env"