P1 security batch: quota execution checks, cost accounting, goal/coordinator semantics, PR channel, orphan signature, control-plane and console hardening

- Docker quota watchdog + fail-closed quota checks, system tasks need real owner
- max_cost_usd actually accumulated, cancel records cost, estimated rows excluded from unpriced cap, cache_write declared non-billed
- goal-resume keeps original verify on breakpoint resume, goal retry falls back to resume, goal_max_rounds capped at 100 at create and execution
- coordinator children inherit parent model/effort, orphans marked interrupted with audit
- PR jobs on docker workers return explicit needs_local_worker instead of silent empty
- worker code signature covers 6 files and is checked before claim, fail-closed
- sub2api lazy provisioning with rotation, backup whitelist + 0600, push SSRF block, repos/workers desensitized, key/project audits and limits, console buttons/quota/status wording, coordinator/automation quota reserve

cloud/tests/test_queue_sandbox.py

@@ -331,7 +331,8 @@ class TestGoalExecutors(unittest.TestCase):
             {"id": "t1", "prompt": "do it",
              "verify_command": "true"})
         self.assertEqual(result["status"], "failed")
-        self.assertIn("请新建任务", result["goal_error"])
+        # P1 新语义：goal 失败请用继续而非重试（旧“请新建任务”已废）。
+        self.assertIn("请用继续而非重试", result["goal_error"])
 
     def test_local_goal_task_without_verify_is_llm_decided(self):
         # 新语义：没有验收命令不再抛错——走模型自决分支：