P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

- Docker quota watchdog + fail-closed quota checks, system tasks need real owner
- max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed
- goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution
- coordinator children inherit parent model/effort, orphans marked interrupted with audit
- PR jobs on docker workers return explicit needs_local_worker instead of silent empty
- worker code signature covers 6 files and is checked before claim, fail-closed
- sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve

cloud/tests/test_cloud_dispatch_pr.py

@@ -184,7 +184,16 @@ class WorkerRegistryTestCase(_ServerCase):
         self.assertEqual(status, 200, body)
         self.assertTrue(body["alive"])
         self.assertEqual(body["executor"], "docker")
-        status, body = self._req("GET", "/workers", None, self.owner_key)
+        # P1：完整 workers 清单只限全局管理员，本测试里 owner 即管理员。
+        old_admins = os.environ.get("CODEX_GLOBAL_ADMINS")
+        os.environ["CODEX_GLOBAL_ADMINS"] = self.owner_id
+        try:
+            status, body = self._req("GET", "/workers", None, self.owner_key)
+        finally:
+            if old_admins is None:
+                os.environ.pop("CODEX_GLOBAL_ADMINS", None)
+            else:
+                os.environ["CODEX_GLOBAL_ADMINS"] = old_admins
         self.assertEqual(status, 200, body)
         self.assertEqual(len(body["workers"]), 1)
         self.assertTrue(body["workers"][0]["alive"])