feat(alert): A2 告警引擎分布式安全 — Redis 分布式锁(SetNX)

- Cache 接口新增 SetNX 方法(go-redis 原子 / redka check-then-set 单副本安全)
- AlertEngine 改造为支持分布式锁: tryAcquireLock/releaseLock/GetEngineStatus
- 多副本部署时仅 Leader 执行告警检查, 60s TTL 防死锁, fail-open 容错
- 新增 GET /alerts/engine/status 监控端点(is_leader/instance_id/lock_holder)
- 修复 GrafanaDashboard.tsx Panel.options 类型不匹配导致构建中断
- 同步未提交的前端类型安全迁移(140+ 文件)
- ROADMAP/TDD_PLAN/PROJECT_EVALUATION 三文档同步更新

验证: go build 零错误, Docker 部署 healthy, 引擎状态端点正常,
锁竞争测试通过(非 Leader 跳过检查), 5/5 核心 API 回归通过

frontend/src/components/kubernetes/deployment-workload/ActionModals.tsx

@@ -6,10 +6,11 @@ import { Label } from '@/components/ui/label';
 import { AlertTriangle, Loader2, Minus, Plus, Trash2 } from 'lucide-react';
 import { ModalShell } from './ModalShell';
 import type { ActionModal } from './types';
+import type { JsonData } from '@/types/common';
 
 export interface ActionModalsProps {
   modal: ActionModal;
-  deployment: any;
+  deployment?: JsonData;
   namespace: string;
   deploymentName: string;
   newImage: string;

frontend/src/components/kubernetes/deployment-workload/CICDWebhookContent.tsx

@@ -4,6 +4,7 @@ import { Button } from '@/components/ui/button';
 import { Label } from '@/components/ui/label';
 import { useToast } from '@/hooks/use-toast';
 import { useUserStore } from '@/store';
+import type { JsonData } from '@/types/common';
 
 export interface CICDWebhookContentProps {
   clusterCode: string;
@@ -13,7 +14,7 @@ export interface CICDWebhookContentProps {
 
 export function CICDWebhookContent({ clusterCode, namespace, deploymentName }: CICDWebhookContentProps) {
   const { toast } = useToast();
-  const token = useUserStore(( s: any) => s.token) || localStorage.getItem('token') || '';
+  const token = useUserStore((s: JsonData) => s.token) || localStorage.getItem('token') || '';
   const webhookUrl = `${window.location.origin}/api/v1/clusters/${clusterCode}/namespaces/${namespace}/deployments/${deploymentName}/update-image`;
   const curlCmd = `curl -X POST '${webhookUrl}' \\
   -H 'Authorization: Bearer ${token ? token.substring(0, 16) + '...' : 'YOUR_TOKEN'}' \\

frontend/src/components/kubernetes/deployment-workload/EditModeContainer.tsx

@@ -6,12 +6,13 @@ import { DeploymentEditContainers } from '../DeploymentEditContainers';
 import { DeploymentEditStorage } from '../DeploymentEditStorage';
 import { DeploymentEditAdvanced } from '../DeploymentEditAdvanced';
 import { DeploymentEditService } from '../DeploymentEditService';
+import type { JsonData } from '@/types/common';
 
 export interface EditModeContainerProps {
   clusterCode: string;
   namespace: string;
   deploymentName: string;
-  manifest: any | null;
+  manifest: JsonData | null;
   onSaved: () => void;
   onCancel: () => void;
 }
@@ -19,13 +20,13 @@ export interface EditModeContainerProps {
 export function EditModeContainer({ clusterCode, namespace, deploymentName, manifest, onSaved, onCancel }: EditModeContainerProps) {
   type EditTab = 'basic' | 'containers' | 'storage' | 'advanced' | 'service';
   const [activeTab, setActiveTab] = useState<EditTab>('basic');
-  const [editManifest, setEditManifest] = useState<any>(manifest);
+  const [editManifest, setEditManifest] = useState<JsonData>(manifest);
 
   useEffect(() => {
     if (manifest) setEditManifest(manifest);
   }, [manifest]);
 
-  const handleSaved = (updated?: any) => {
+  const handleSaved = (updated?: JsonData) => {
     if (updated) setEditManifest(updated);
     onSaved();
   };

frontend/src/components/kubernetes/deployment-workload/PodLogsModal.tsx

@@ -8,6 +8,7 @@ import { FileText, RefreshCw, Loader2, X } from 'lucide-react';
 import { kubernetesApi } from '@/api';
 import { useToast } from '@/hooks/use-toast';
 import { useUserStore } from '@/store';
+import type { JsonData } from '@/types/common';
 
 export interface PodLogsModalProps {
   clusterCode: string;
@@ -28,7 +29,7 @@ export function PodLogsModal({ clusterCode, namespace, podName, containers, onCl
   const loadLogs = async () => {
     setLoading(true);
     try {
-      const res: Record<string, any> = await kubernetesApi.getPodLogs(clusterCode, namespace, podName, tail, container || undefined);
+      const res: JsonData = await kubernetesApi.getPodLogs(clusterCode, namespace, podName, tail, container || undefined);
       setLogs(res?.data?.logs || res?.logs || res || '无日志');
     } catch {
       setLogs('获取日志失败');