chore: 初始开源发布

iotlcm-worker-svr：异步执行中枢（RabbitMQ 消费者 + 全量同步编排）。

- Go module：iotlcm-worker-svr → git.5iot.com/iotlcm-public/iotlcm-worker-svr（214 文件）
- 凭据与内部标识脱敏：MySQL/Redis 凭据、私网与生产 IP、内网域名、
  库名 xiujie_admin → iotlcm、哨兵名占位
- 159 处真实手机号 → 合法 11 位编造号（保留号段与后 4 位，维持互异，
  不破坏「校验 MSISDN 格式」等测试断言）
- 移除内部资产：CI 触发器、Jenkins 触发测试文档、预演门禁与镜像
  digest 记录
- Dockerfile 改用公共基础镜像（golang:1.25-alpine → alpine:3.23），
  移除写死的 git 凭据
- README 重写（架构/全量同步模型/配置/已知失败），补 Apache-2.0
  LICENSE，LF 行尾 + .gitattributes

已知：3 个测试包在源仓同一提交上同样失败（client/upstream、
service/allocate、service/inbound），属既有缺陷，本仓未引入亦未修复。

internal/fullsync/contract/doc.go

@@ -0,0 +1,14 @@
+// Package contract defines the shared full-sync domain and service boundaries.
+// It contains no Redis, filesystem, replay execution, or HTTP handler code.
+//
+// Legacy queue models remain in internal/queue/zset until adapters adopt this
+// package. Their existing JSON fields are retained here; new run fields are
+// optional so historical records still decode. Missing extended counters mean
+// unknown, not a reconstructed total. FailedCount is the historical terminal
+// count for a run; cleaning source failures changes PendingFailureCount only.
+//
+// Implementations must preserve these boundaries: run-local Redis keys share
+// one hash tag, global indexes do not; archive summaries never contain card
+// details; cursors are opaque and scoped to the original query; replay writes
+// are idempotent and fenced by a lease before source cleanup is allowed.
+package contract