新增: 知识图谱Phase3基础设施(父⑥) — project_services+D10凭证审查+IPC+AI工具

父⑥ Phase 3(对标设计 §2.3):
- V31 迁移:project_services 表(id/project_id FK/name/service_type/endpoint/config_json/environment/remark)+ idx_project_services_project
- ProjectServiceRecord + ProjectServiceRepo(impl_repo! 宏 + insert_validated/update_full_validated/list_by_project/list_by_project_env)
- service_type 白名单(mysql/postgresql/sqlite/redis/mongodb/mq/api/other,应用层校验)
- D10 凭证审查:config_json/endpoint/remark 含 password/passwd/secret/api_key/apikey/token 拒绝(不存敏感凭证,凭证走环境变量)
- 4 IPC(add/update/remove/list_project_services,环境过滤)+ lib.rs 注册
- AI 工具 add/list_project_services(Medium/Low)+ 基线 39→41(data 25→27)+ 3 端到端测试

P2 修复(verify agent 发现):
- settings.rs project_services 白名单移除 service_type(对齐注释"不列入"+ status 收口,防 update_field 旁路绕过 validate_service_type)

df-storage 117(105+12) + df-ai 331 + 基线 41 测试全过。

crates/df-storage/src/crud/mod.rs

@@ -8,6 +8,7 @@
 //! - [`mod@task_repo`]:TaskRepo(含 advance_status_atomic 状态机收口)
 //! - [`mod@task_link_repo`]:TaskLinkRepo(任务横向关联 task_links,V29,知识图谱 Phase 1)
 //! - [`mod@project_event_repo`]:ProjectEventRepo(统一事件流 project_events,V30,知识图谱 Phase 2)
+//! - [`mod@project_service_repo`]:ProjectServiceRepo(基础设施配置 project_services,V31,知识图谱 Phase 3)
 //! - [`mod@conversation_repo`]:AiProviderRepo/AiConversationRepo/AiToolExecutionRepo
 //! - [`mod@idea_repo`]:IdeaRepo/KnowledgeRepo/KnowledgeEventsRepo + 向量工具
 //! - [`mod@idea_eval_repo`]:IdeaEvalRepo(灵感评估历史追加型审计表 idea_evaluations,V22)
@@ -22,6 +23,7 @@ mod idea_repo;
 mod message_repo;
 mod project_event_repo;
 mod project_repo;
+mod project_service_repo;
 mod settings;
 mod task_link_repo;
 mod task_repo;
@@ -32,6 +34,7 @@ pub use idea_repo::*;
 pub use message_repo::*;
 pub use project_event_repo::*;
 pub use project_repo::*;
+pub use project_service_repo::*;
 pub use settings::*;
 pub use task_link_repo::*;
 pub use task_repo::*;
@@ -272,7 +275,7 @@ mod baseline_tests {
         let tables = [
             "ideas", "projects", "tasks", "releases", "branches", "workflow_executions",
             "node_executions", "ai_providers", "ai_conversations", "ai_tool_executions",
-            "knowledges", "knowledge_events",
+            "knowledges", "knowledge_events", "project_services",
         ];
         for t in tables {
             assert!(
@@ -301,6 +304,7 @@ mod baseline_tests {
         let _ = TaskRepo::new(&db);
         let _ = TaskLinkRepo::new(&db);
         let _ = ProjectEventRepo::new(&db);
+        let _ = ProjectServiceRepo::new(&db);
         let _ = BranchRepo::new(&db);
         let _ = ReleaseRepo::new(&db);
         let _ = WorkflowRepo::new(&db);