feat(backend): 出入库汇总近30天滚动窗口 + 跨租户安全加固

- summaryBounds：本月/近30天滚动双口径（stock-in/out Summary ?window=rolling30）
- security(SEC-001)：新增 ownership.go ensureShopRef 写入侧防线（stock-in/out/finance/
  盘点建单的 warehouse/partner/product 外键归属校验）；读取侧全部 Preload 补
  shop_id 作用域，finance Summary JOIN 补租户条件；回归测试 CrossTenantRefs
- security(SEC-002)：release 模式 JWT 密钥为空/默认值时拒绝启动
- gofmt 对齐若干 model/cmd 文件

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JJ1g8XV1YhhmHRzhwWEW7o

backend/internal/handler/import.go

@@ -8,9 +8,9 @@ import (
 	"strings"
 	"time"
 
-	"github.com/shakinm/xlsReader/xls"
 	"github.com/gin-gonic/gin"
 	"github.com/google/uuid"
+	"github.com/shakinm/xlsReader/xls"
 	"github.com/xuri/excelize/v2"
 	"gorm.io/gorm"
 
@@ -336,12 +336,12 @@ func (h *ImportHandler) ImportStockIn(c *gin.Context) {
 		total := qty * price
 		totalAmount += total
 		items = append(items, model.StockInItem{
-			ShopID:    shopID,
-			ProductID: prod.ID,
-			Quantity:  qty,
-			UnitPrice: price,
+			ShopID:     shopID,
+			ProductID:  prod.ID,
+			Quantity:   qty,
+			UnitPrice:  price,
 			TotalPrice: total,
-			BatchNo:   batchNo,
+			BatchNo:    batchNo,
 		})
 	}
 
@@ -439,10 +439,10 @@ func (h *ImportHandler) ImportStockOut(c *gin.Context) {
 		total := qty * price
 		totalAmount += total
 		items = append(items, model.StockOutItem{
-			ShopID:    shopID,
-			ProductID: prod.ID,
-			Quantity:  qty,
-			UnitPrice: price,
+			ShopID:     shopID,
+			ProductID:  prod.ID,
+			Quantity:   qty,
+			UnitPrice:  price,
 			TotalPrice: total,
 		})
 	}