feat(alert): A2 告警引擎分布式安全 — Redis 分布式锁(SetNX)

- Cache 接口新增 SetNX 方法(go-redis 原子 / redka check-then-set 单副本安全)
- AlertEngine 改造为支持分布式锁: tryAcquireLock/releaseLock/GetEngineStatus
- 多副本部署时仅 Leader 执行告警检查, 60s TTL 防死锁, fail-open 容错
- 新增 GET /alerts/engine/status 监控端点(is_leader/instance_id/lock_holder)
- 修复 GrafanaDashboard.tsx Panel.options 类型不匹配导致构建中断
- 同步未提交的前端类型安全迁移(140+ 文件)
- ROADMAP/TDD_PLAN/PROJECT_EVALUATION 三文档同步更新

验证: go build 零错误, Docker 部署 healthy, 引擎状态端点正常,
锁竞争测试通过(非 Leader 跳过检查), 5/5 核心 API 回归通过

frontend/src/components/kubernetes/DeploymentEditAdvanced.tsx

@@ -14,13 +14,14 @@ import { kubernetesApi } from '@/api';
 import { saveDeploymentManifest } from './deployment-manifest-save';
 import { SchedulingSection, type ScheduleMode } from './deployment-edit-advanced/SchedulingSection';
 import { DnsHostSection } from './deployment-edit-advanced/DnsHostSection';
+import type { JsonData } from '@/types/common';
 
 interface Props {
   clusterCode: string;
   namespace: string;
   deploymentName: string;
-  manifest: any | null;
-  onSaved: (updated?: any) => void;
+  manifest: JsonData | null;
+  onSaved: (updated?: JsonData) => void;
   onCancel: () => void;
 }
 
@@ -36,7 +37,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
   const { toast } = useToast();
   const [saving, setSaving] = useState(false);
   const [loading, setLoading] = useState(!manifest);
-  const [rawManifest, setRawManifest] = useState<any>(manifest || {});
+  const [rawManifest, setRawManifest] = useState<JsonData>(manifest || {});
 
   // 更新策略
   const [strategyType, setStrategyType] = useState<'RollingUpdate' | 'Recreate'>('RollingUpdate');
@@ -119,13 +120,13 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
     // 加载节点列表
     if (clusterCode) {
       setNodesLoading(true);
-      kubernetesApi.getClusterNodes(clusterCode).then((res: any) => {
-        const nodes: Record<string, any>[] = Array.isArray(res) ? res : (res?.items || res?.list || []);
-        const mapped = nodes.map((n: any) => {
+      kubernetesApi.getClusterNodes(clusterCode).then((res: JsonData) => {
+        const nodes: JsonData[] = Array.isArray(res) ? res : (res?.items || res?.list || []);
+        const mapped = nodes.map((n: JsonData) => {
           const meta = n.metadata || {};
           const status = n.status || {};
-          const addresses: Record<string, any>[] = Array.isArray(status.addresses) ? status.addresses : [];
-          const internalIP = addresses.find((a: any) => a.type === 'InternalIP')?.address || '';
+          const addresses: JsonData[] = Array.isArray(status.addresses) ? status.addresses : [];
+          const internalIP = addresses.find((a: JsonData) => a.type === 'InternalIP')?.address || '';
           return { name: meta.name || '', ip: internalIP, labels: meta.labels || {} };
         });
         setAvailableNodes(mapped);
@@ -143,7 +144,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
     }
 
     // tolerations
-    const tols: Record<string, any>[] = Array.isArray(podSpec.tolerations) ? podSpec.tolerations : [];
+    const tols: JsonData[] = Array.isArray(podSpec.tolerations) ? podSpec.tolerations : [];
     setTolerations(tols.map(t => ({
       key: t.key || '',
       operator: t.operator || 'Equal',
@@ -172,7 +173,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
     setShareProcessNamespace(!!podSpec.shareProcessNamespace);
 
     // hostAliases（M8 补全）
-    const ha: Record<string, any>[] = Array.isArray(podSpec.hostAliases) ? podSpec.hostAliases : [];
+    const ha: JsonData[] = Array.isArray(podSpec.hostAliases) ? podSpec.hostAliases : [];
     setHostAliases(ha.map(a => ({
       ip: a.ip || '',
       hostnames: Array.isArray(a.hostnames) ? a.hostnames.join(', ') : '',
@@ -182,7 +183,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
     const dc = podSpec.dnsConfig || {};
     setDnsNameservers(Array.isArray(dc.nameservers) ? dc.nameservers.join('\n') : '');
     setDnsSearches(Array.isArray(dc.searches) ? dc.searches.join('\n') : '');
-    const opts: Record<string, any>[] = Array.isArray(dc.options) ? dc.options : [];
+    const opts: JsonData[] = Array.isArray(dc.options) ? dc.options : [];
     setDnsOptions(opts.map(o => ({ name: o.name || '', value: o.value || '' })));
 
     setLoading(false);
@@ -229,7 +230,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
         if (podSpec.nodeName) delete podSpec.nodeName;
         if (podSpec.affinity) delete podSpec.affinity.nodeAffinity;
       } else if (scheduleMode === 'nodeAffinity') {
-        const matchExpressions: Record<string, any>[] = labelSelectorKv
+        const matchExpressions: JsonData[] = labelSelectorKv
           .filter(s => s.key.trim())
           .map(s => ({ key: s.key.trim(), operator: 'In', values: [s.value] }));
         if (matchExpressions.length > 0) {
@@ -250,7 +251,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
       const tolsK8s = tolerations
         .filter(t => t.key || t.operator === 'Exists')
         .map(t => {
-          const out: Record<string, any> = {};
+          const out: JsonData = {};
           if (t.key) out.key = t.key;
           if (t.operator) out.operator = t.operator;
           if (t.value && t.operator !== 'Exists') out.value = t.value;
@@ -269,7 +270,7 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
       if (serviceAccountName) podSpec.serviceAccountName = serviceAccountName;
 
       // Pod 安全上下文
-      const sc: Record<string, any> = {};
+      const sc: JsonData = {};
       if (podFsGroup) sc.fsGroup = Number(podFsGroup);
       if (podRunAsUser) sc.runAsUser = Number(podRunAsUser);
       if (podRunAsGroup) sc.runAsGroup = Number(podRunAsGroup);
@@ -295,13 +296,13 @@ export function DeploymentEditAdvanced({ clusterCode, namespace, deploymentName,
       else delete podSpec.hostAliases;
 
       // dnsConfig（M8 补全）— 仅 dnsPolicy=None 时 dnsConfig 才有意义，但仍允许编辑
-      const dcObj: Record<string, any> = {};
+      const dcObj: JsonData = {};
       const ns = dnsNameservers.split('\n').map(s => s.trim()).filter(Boolean);
       if (ns.length > 0) dcObj.nameservers = ns;
       const sr = dnsSearches.split('\n').map(s => s.trim()).filter(Boolean);
       if (sr.length > 0) dcObj.searches = sr;
       const dkOpts = dnsOptions.filter(o => o.name.trim()).map(o => {
-        const out: Record<string, any> = { name: o.name.trim() };
+        const out: JsonData = { name: o.name.trim() };
         if (o.value.trim()) out.value = o.value.trim();
         return out;
       });