chore: 初始开源发布

iotlcm-worker-svr：异步执行中枢（RabbitMQ 消费者 + 全量同步编排）。

- Go module：iotlcm-worker-svr → git.5iot.com/iotlcm-public/iotlcm-worker-svr（214 文件）
- 凭据与内部标识脱敏：MySQL/Redis 凭据、私网与生产 IP、内网域名、
  库名 xiujie_admin → iotlcm、哨兵名占位
- 159 处真实手机号 → 合法 11 位编造号（保留号段与后 4 位，维持互异，
  不破坏「校验 MSISDN 格式」等测试断言）
- 移除内部资产：CI 触发器、Jenkins 触发测试文档、预演门禁与镜像
  digest 记录
- Dockerfile 改用公共基础镜像（golang:1.25-alpine → alpine:3.23），
  移除写死的 git 凭据
- README 重写（架构/全量同步模型/配置/已知失败），补 Apache-2.0
  LICENSE，LF 行尾 + .gitattributes

已知：3 个测试包在源仓同一提交上同样失败（client/upstream、
service/allocate、service/inbound），属既有缺陷，本仓未引入亦未修复。

internal/consumer/rabbitmq/channel_refresh_test.go

@@ -0,0 +1,134 @@
+package rabbitmq
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	"git.5iot.com/iotlcm-public/iotlcm-worker-svr/internal/model"
+	"github.com/gogf/gf/v2/frame/g"
+	"github.com/gogf/gf/v2/os/gcfg"
+)
+
+func setChannelRefreshTestConfig(t *testing.T, gateway, proxy string) {
+	t.Helper()
+	oldAdapter := g.Cfg().GetAdapter()
+	adapter, err := gcfg.NewAdapterContent(fmt.Sprintf(`
+upstream:
+  gateway:
+    address: %q
+    timeout: 1s
+  proxy:
+    address: %q
+    timeout: 1s
+`, gateway, proxy))
+	if err != nil {
+		t.Fatal(err)
+	}
+	g.Cfg().SetAdapter(adapter)
+	t.Cleanup(func() { g.Cfg().SetAdapter(oldAdapter) })
+}
+
+func testServerAddress(server *httptest.Server) string {
+	return strings.TrimPrefix(server.URL, "http://")
+}
+
+func TestRefreshChannelCallsGatewayAndProxy(t *testing.T) {
+	var gatewayCalls atomic.Int32
+	var proxyCalls atomic.Int32
+	newServer := func(counter *atomic.Int32) *httptest.Server {
+		return httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, request *http.Request) {
+			counter.Add(1)
+			if request.URL.Path != "/internal/channel/refresh" || request.URL.Query().Get("chanKey") != "channel-a" {
+				t.Fatalf("unexpected request: %s", request.URL.String())
+			}
+			_, _ = w.Write([]byte(`{"code":0,"message":"success"}`))
+		}))
+	}
+	gateway := newServer(&gatewayCalls)
+	defer gateway.Close()
+	proxy := newServer(&proxyCalls)
+	defer proxy.Close()
+	setChannelRefreshTestConfig(t, testServerAddress(gateway), testServerAddress(proxy))
+
+	if err := refreshChannel(context.Background(), "channel-a"); err != nil {
+		t.Fatal(err)
+	}
+	if gatewayCalls.Load() != 1 || proxyCalls.Load() != 1 {
+		t.Fatalf("gateway calls=%d proxy calls=%d", gatewayCalls.Load(), proxyCalls.Load())
+	}
+}
+
+func TestRenameChannelOnlyRebuildsRuntimeInstances(t *testing.T) {
+	var (
+		mu     sync.Mutex
+		events []string
+	)
+	newServer := func(target string) *httptest.Server {
+		return httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, request *http.Request) {
+			mu.Lock()
+			events = append(events, target+":"+request.URL.Path+":"+request.URL.Query().Get("chanKey"))
+			mu.Unlock()
+			_, _ = w.Write([]byte(`{"code":0,"message":"success"}`))
+		}))
+	}
+	gateway := newServer("gateway")
+	defer gateway.Close()
+	proxy := newServer("proxy")
+	defer proxy.Close()
+	setChannelRefreshTestConfig(t, testServerAddress(gateway), testServerAddress(proxy))
+
+	if err := renameChannel(context.Background(), "channel-old", "channel-new"); err != nil {
+		t.Fatal(err)
+	}
+	want := []string{
+		"gateway:/internal/channel/refresh:channel-new",
+		"proxy:/internal/channel/refresh:channel-new",
+		"gateway:/internal/channel/remove:channel-old",
+		"proxy:/internal/channel/remove:channel-old",
+	}
+	if strings.Join(events, "\n") != strings.Join(want, "\n") {
+		t.Fatalf("rename events = %q, want %q", events, want)
+	}
+}
+
+func TestChannelControlErrorIncludesTargetStatusAndMessage(t *testing.T) {
+	gateway := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		w.WriteHeader(http.StatusBadGateway)
+		_, _ = w.Write([]byte(`{"code":50,"message":"carrier unavailable"}`))
+	}))
+	defer gateway.Close()
+	setChannelRefreshTestConfig(t, testServerAddress(gateway), "127.0.0.1:1")
+
+	err := refreshChannelTarget(context.Background(), "upstream.gateway", "channel-a")
+	if err == nil {
+		t.Fatal("expected target error")
+	}
+	message := err.Error()
+	for _, part := range []string{"target=upstream.gateway", "status=502", "carrier unavailable"} {
+		if !strings.Contains(message, part) {
+			t.Fatalf("error %q does not contain %q", message, part)
+		}
+	}
+}
+
+func TestHandleChannelRefreshReturnsError(t *testing.T) {
+	gateway := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
+		_, _ = w.Write([]byte(`{"code":50,"message":"refresh rejected"}`))
+	}))
+	defer gateway.Close()
+	setChannelRefreshTestConfig(t, testServerAddress(gateway), "127.0.0.1:1")
+
+	ctx, cancel := context.WithTimeout(context.Background(), 20*time.Millisecond)
+	defer cancel()
+	consumer := &Consumers{}
+	if err := consumer.handleChannelRefresh(ctx, model.ChannelRefreshMessage{Type: "channel", ChanKey: "channel-a"}); err == nil {
+		t.Fatal("refresh failure was acknowledged as success")
+	}
+}