feat: CHV 审核修复 P2（范围恢复为全做）

P2-1：preflight reuse/CPU/内存校验块小提取为
_preflight_config_checks（纯移动，深耦合处如实停）。
P2-2：build_vm_command 降级为私有 _build_vm_command；
Docker goal 内联解析顶部加正典分叉说明 + 同步检查清单。
P2-3：gaps grep 文本断言改成真实 Worker._run_attempt
行为断言。P2-4：README/build.sh 口径对齐（章节顺序、
BUILDINFO 名字列表、Node.js 不装写实）。P2-5：stop_vm
删除失败记审计。P2-6：CPU/内存校验统一进 preflight。
测试：原 84 + 新增 33 = 117 项，mock，无真 VM。

cloud/tests/test_chv_gaps.py

@@ -175,13 +175,40 @@ class BreakpointWiringTest(ChvGapCase):
         ssh_calls = [c for c in self.calls if c and c[0] == "ssh"]
         self.assertTrue(any("--model-provider" in c for c in ssh_calls))
 
-    def test_worker_branch_uses_hasattr_not_only_local(self):
-        #  worker.py 通用分支的文字证据：Local 优先、其次 hasattr。
-        worker_path = Path(__file__).resolve().parents[1] / "worker.py"
-        text = worker_path.read_text()
-        self.assertIn("_call_goal_resume_breakpoint", text)
-        self.assertIn("hasattr(", text)
-        self.assertIn("goal_resume_breakpoint_task", text)
+    def test_worker_breakpoint_branch_calls_generic_executor(self):
+        # feat-chv-fix（P2-3）：不再用源码 grep 充数，改为行为
+        # 断言——真实 Worker._run_attempt 走通用断点分支，调到
+        # 非 Local 执行器的 goal_resume_breakpoint_task，并把
+        # 结果原样返回（参数、守卫顺序、返回值都覆盖）。
+        from cloud.server import init_db
+        db_path = os.path.join(self.dir, "control.db")
+        init_db(db_path)
+        seen = {}
+
+        class FakeGeneric:
+            def goal_resume_breakpoint_task(self, task,
+                                            model_provider=None,
+                                            extra_env=None):
+                seen["provider"] = model_provider
+                seen["task_id"] = task["id"]
+                return {"executor": "generic", "task_id": task["id"],
+                        "status": "completed", "stdout": "",
+                        "stderr": "", "returncode": 0,
+                        "host_status": None, "goal_met": True,
+                        "goal_error": None}
+
+        worker = Worker(db_path, "/fake/host.py",
+                        executor=FakeGeneric(),
+                        env={"XCM_API_KEY": "test-placeholder"})
+        task = {"id": "bp-behav", "project_id": "p1",
+                "prompt": "续跑", "goal_mode": 1,
+                "_goal_resume_breakpoint": True}
+        result, error = worker._run_attempt(task)
+        self.assertIsNone(error)
+        self.assertEqual(result["status"], "completed")
+        self.assertTrue(result["goal_met"])
+        self.assertEqual(seen["task_id"], "bp-behav")
+        self.assertNotIn("executor 不支持", str(result))
 
 
 # -- (2) reconcile_orphans 接线 ---------------------------------------