fix(deploy): 加固 Redis 持久化与旧环境启动配置

.github/workflows/test-deployment-public-url.yml

@@ -13,6 +13,10 @@ on:
       - 'scripts/init-server-http-bind-ip.sh'
       - 'scripts/test-server-http-bind-ip.sh'
       - 'scripts/init-security-env.sh'
+      - 'scripts/init-security-origin.sh'
+      - 'scripts/check-redis-persistence.sh'
+      - 'scripts/test-security-origin.sh'
+      - 'scripts/test-redis-persistence-guard.sh'
       - 'scripts/test-deployment-public-url.sh'
       - '.github/workflows/test-deployment-public-url.yml'
   pull_request:
@@ -27,6 +31,10 @@ on:
       - 'scripts/init-server-http-bind-ip.sh'
       - 'scripts/test-server-http-bind-ip.sh'
       - 'scripts/init-security-env.sh'
+      - 'scripts/init-security-origin.sh'
+      - 'scripts/check-redis-persistence.sh'
+      - 'scripts/test-security-origin.sh'
+      - 'scripts/test-redis-persistence-guard.sh'
       - 'scripts/test-deployment-public-url.sh'
       - '.github/workflows/test-deployment-public-url.yml'
   workflow_dispatch:
@@ -39,7 +47,7 @@ jobs:
 
       - name: Check shell syntax
         run: |
-          bash -n start.sh update.sh scripts/init-security-env.sh scripts/init-public-api-base-url.sh scripts/init-server-http-bind-ip.sh scripts/test-public-api-base-url.sh scripts/test-server-http-bind-ip.sh scripts/test-deployment-public-url.sh
+          bash -n start.sh update.sh scripts/init-security-env.sh scripts/init-security-origin.sh scripts/check-redis-persistence.sh scripts/init-public-api-base-url.sh scripts/init-server-http-bind-ip.sh scripts/test-security-origin.sh scripts/test-redis-persistence-guard.sh scripts/test-public-api-base-url.sh scripts/test-server-http-bind-ip.sh scripts/test-deployment-public-url.sh
 
       - name: Test migration helper
         run: bash scripts/test-public-api-base-url.sh
@@ -47,5 +55,10 @@ jobs:
       - name: Test server HTTP bind migration
         run: bash scripts/test-server-http-bind-ip.sh
 
+      - name: Test startup recovery guards
+        run: |
+          bash scripts/test-security-origin.sh
+          bash scripts/test-redis-persistence-guard.sh
+
       - name: Test deployment dry-run matrix
         run: bash scripts/test-deployment-public-url.sh

.github/workflows/test-start-ps1.yml

@@ -10,6 +10,10 @@ on:
       - 'scripts/Test-PublicApiBaseUrl.ps1'
       - 'scripts/Initialize-ServerHttpBindIp.ps1'
       - 'scripts/Test-ServerHttpBindIp.ps1'
+      - 'scripts/Initialize-SecurityOrigin.ps1'
+      - 'scripts/Test-SecurityOrigin.ps1'
+      - 'scripts/Assert-RedisPersistence.ps1'
+      - 'scripts/Test-RedisPersistence.ps1'
       - '.env.sample'
       - '.github/workflows/test-start-ps1.yml'
   pull_request:
@@ -20,6 +24,10 @@ on:
       - 'scripts/Test-PublicApiBaseUrl.ps1'
       - 'scripts/Initialize-ServerHttpBindIp.ps1'
       - 'scripts/Test-ServerHttpBindIp.ps1'
+      - 'scripts/Initialize-SecurityOrigin.ps1'
+      - 'scripts/Test-SecurityOrigin.ps1'
+      - 'scripts/Assert-RedisPersistence.ps1'
+      - 'scripts/Test-RedisPersistence.ps1'
       - '.env.sample'
       - '.github/workflows/test-start-ps1.yml'
   workflow_dispatch:
@@ -69,3 +77,8 @@ jobs:
       - name: Test server HTTP bind migration helper
         run: |
           powershell -ExecutionPolicy Bypass -File .\scripts\Test-ServerHttpBindIp.ps1
+
+      - name: Test startup recovery guards
+        run: |
+          powershell -ExecutionPolicy Bypass -File .\scripts\Test-SecurityOrigin.ps1
+          powershell -ExecutionPolicy Bypass -File .\scripts\Test-RedisPersistence.ps1