P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

- Docker quota watchdog + fail-closed quota checks, system tasks need real owner
- max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed
- goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution
- coordinator children inherit parent model/effort, orphans marked interrupted with audit
- PR jobs on docker workers return explicit needs_local_worker instead of silent empty
- worker code signature covers 6 files and is checked before claim, fail-closed
- sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve

cloud/tests/test_caps_server.py

@@ -33,6 +33,9 @@ class CapsServerTestCase(unittest.TestCase):
         self.auth = AuthStore(self.db_path)
         self.owner_id, self.owner_key = self.auth.create_user("owner")
         self.viewer_id, self.viewer_key = self.auth.create_user("viewer")
+        # P1：完整 workers 清单只限全局管理员；owner 在此测试里即管理员。
+        self._old_admins = os.environ.get("CODEX_GLOBAL_ADMINS")
+        os.environ["CODEX_GLOBAL_ADMINS"] = self.owner_id
         self.server = create_server(self.db_path, "127.0.0.1", 0)
         self.port = self.server.server_address[1]
         self.thread = threading.Thread(
@@ -48,6 +51,10 @@ class CapsServerTestCase(unittest.TestCase):
         except Exception:
             pass
         self.tmp.cleanup()
+        if getattr(self, "_old_admins", None) is None:
+            os.environ.pop("CODEX_GLOBAL_ADMINS", None)
+        else:
+            os.environ["CODEX_GLOBAL_ADMINS"] = self._old_admins
 
     def _req(self, method, path, body=None, key=None):
         conn = http.client.HTTPConnection("127.0.0.1", self.port, timeout=10)
@@ -82,11 +89,21 @@ class CapsServerTestCase(unittest.TestCase):
              "capacity": 4, "running": 2},
             self.owner_key)
         self.assertEqual(status, 200, body)
-        # 读权限：任何已认证用户可读（viewer 也能看到基础设施行）。
-        workers = self._workers(self.viewer_key)
+        # P1：完整清单只限全局管理员（owner 在此测试里即管理员）。
+        workers = self._workers(self.owner_key)
         self.assertEqual(workers["w1"]["capacity"], 4)
         self.assertEqual(workers["w1"]["running"], 2)
 
+    def test_workers_list_non_admin_gets_aggregate_only(self):
+        self._req("POST", "/workers/heartbeat",
+                  {"worker_id": "w1", "executor": "local",
+                   "capacity": 4, "running": 2},
+                  self.owner_key)
+        status, body = self._req("GET", "/workers", key=self.viewer_key)
+        self.assertEqual(status, 200, body)
+        self.assertNotIn("workers", body)
+        self.assertIn("workers_total", body)
+
     def test_heartbeat_without_running_preserves_old(self):
         self._req("POST", "/workers/heartbeat",
                   {"worker_id": "w1", "capacity": 2, "running": 1},