feat(audit): F1+F2 告警静默规则标记完成 + 审计日志CSV导出实现

F1 告警静默规则 [done]:
- 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式)
- 告警引擎 isSilenced 集成 (alert_engine.go)
- 前端 SilenceRuleTab + SilenceDialog
- 路由 /alerts/silences 已注册

F2 审计日志导出 [done]:
- 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM)
- 支持 module/action/username/startTime/endTime 筛选
- 导出限制 10000 条防溢出，自动记录审计日志
- JSON 格式向后兼容 (format=json)
- 前端 exportLogs 传递查询参数

同时包含累积的前期工作:
- 目录重构 internal/ -> controller/model/router (v0.55-v0.57)
- 后端分层架构 dto/repository/service/utils
- 审计模块全功能 (终端审计/操作审计/登录日志)
- asciicast v2 录制格式
- SFTP 文件浏览器
- StatStrip 紧凑统计条
- 在线会话自动刷新
- LiveMonitor WebSocket 诊断修复

验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅

backend/controller/ws_pipeline_log.go

@@ -0,0 +1,142 @@
+package controller
+
+import (
+	"encoding/json"
+	"fmt"
+	"net/http"
+	"strconv"
+	"strings"
+	"time"
+
+	ezredis "ezops/pkg/redis"
+
+	"github.com/gin-gonic/gin"
+	"github.com/gorilla/websocket"
+	"gorm.io/gorm"
+)
+
+var wsUpgrader = websocket.Upgrader{
+	CheckOrigin: func(r *http.Request) bool { return true },
+}
+
+// WSPipelineLogHandler WebSocket 流水线日志推流
+type WSPipelineLogHandler struct {
+	db    *gorm.DB
+	cache ezredis.Cache
+}
+
+// NewWSPipelineLogHandler 创建 WebSocket 日志处理器
+func NewWSPipelineLogHandler(db *gorm.DB, cache ezredis.Cache) *WSPipelineLogHandler {
+	return &WSPipelineLogHandler{db: db, cache: cache}
+}
+
+// StreamLog WebSocket 端点：/ws/pipeline/:runId/log
+func (h *WSPipelineLogHandler) StreamLog(c *gin.Context) {
+	runIDStr := c.Param("runId")
+	runID, err := strconv.ParseUint(runIDStr, 10, 32)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "无效的 runId"})
+		return
+	}
+
+	ws, err := wsUpgrader.Upgrade(c.Writer, c.Request, nil)
+	if err != nil {
+		return
+	}
+	defer ws.Close()
+
+	logKey := fmt.Sprintf("pipeline:run:%d:logs", uint(runID))
+	ctx := c.Request.Context()
+
+	// 首次发送：已有日志
+	raw, _ := h.cache.Get(ctx, logKey)
+	if raw != "" {
+		ws.WriteJSON(map[string]interface{}{"type": "init", "logs": raw})
+	}
+
+	// 轮询新日志（500ms 间隔）
+	lastLen := 0
+	ticker := time.NewTicker(500 * time.Millisecond)
+	defer ticker.Stop()
+
+	done := make(chan struct{})
+	go func() {
+		defer close(done)
+		for {
+			_, _, err := ws.ReadMessage()
+			if err != nil {
+				return
+			}
+		}
+	}()
+
+	for {
+		select {
+		case <-done:
+			return
+		case <-ticker.C:
+			raw, err := h.cache.Get(ctx, logKey)
+			if err != nil || raw == "" {
+				continue
+			}
+			var entries []LogEntry
+			if err := json.Unmarshal([]byte(raw), &entries); err != nil {
+				continue
+			}
+			if len(entries) > lastLen {
+				// 增量推送
+				newEntries := entries[lastLen:]
+				lastLen = len(entries)
+				for _, e := range newEntries {
+					buf, _ := json.Marshal(e)
+					if err := ws.WriteMessage(websocket.TextMessage, buf); err != nil {
+						return
+					}
+				}
+			}
+
+			// 检查流水线是否已结束（日志 key 被删除 = 已写入 DB）
+			if lastLen > 0 {
+				exists, _ := h.cache.Exists(ctx, logKey)
+				if exists == 0 {
+					// 发送完成信号
+					ws.WriteJSON(map[string]interface{}{"type": "done"})
+					return
+				}
+			}
+		case <-ctx.Done():
+			return
+		}
+	}
+}
+
+// GetLogHistory HTTP 日志历史（已完成的任务从 DB 读取）
+func (h *WSPipelineLogHandler) GetLogHistory(c *gin.Context) {
+	runIDStr := c.Param("runId")
+	runID, err := strconv.ParseUint(runIDStr, 10, 32)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "无效的 runId"})
+		return
+	}
+
+	// 先查 Redis（执行中）
+	logKey := fmt.Sprintf("pipeline:run:%d:logs", uint(runID))
+	ctx := c.Request.Context()
+	
+	raw, _ := h.cache.Get(ctx, logKey)
+	if raw != "" && !strings.HasPrefix(raw, "[") {
+		raw = "[]"
+	}
+	if raw != "" {
+		c.JSON(http.StatusOK, gin.H{"code": 200, "data": gin.H{"source": "redis", "logs": raw}})
+		return
+	}
+
+	// 查 DB（已完成）
+	var logs string
+	h.db.Table("ops_pipeline_runs").Where("id = ?", uint(runID)).Select("logs").Scan(&logs)
+	if logs == "" {
+		logs = "[]"
+	}
+	c.JSON(http.StatusOK, gin.H{"code": 200, "data": gin.H{"source": "db", "logs": logs}})
+}