feat(backend): 出入库汇总近30天滚动窗口 + 跨租户安全加固

- summaryBounds：本月/近30天滚动双口径（stock-in/out Summary ?window=rolling30）
- security(SEC-001)：新增 ownership.go ensureShopRef 写入侧防线（stock-in/out/finance/
  盘点建单的 warehouse/partner/product 外键归属校验）；读取侧全部 Preload 补
  shop_id 作用域，finance Summary JOIN 补租户条件；回归测试 CrossTenantRefs
- security(SEC-002)：release 模式 JWT 密钥为空/默认值时拒绝启动
- gofmt 对齐若干 model/cmd 文件

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JJ1g8XV1YhhmHRzhwWEW7o

backend/internal/handler/inventory_test.go

@@ -24,7 +24,7 @@ func TestInventoryHandler_List(t *testing.T) {
 
 	// 直接插入库存记录
 	inv := model.Inventory{
-		ShopID:     shop.ID,
+		ShopID:      shop.ID,
 		WarehouseID: &warehouse.ID,
 		ProductID:   &product.ID,
 		Quantity:    100,
@@ -113,7 +113,7 @@ func TestInventoryHandler_Logs(t *testing.T) {
 	// 创建库存流水
 	opID := user.ID
 	db.Create(&model.InventoryLog{
-		ShopID:     shop.ID,
+		ShopID:      shop.ID,
 		WarehouseID: warehouse.ID,
 		ProductID:   product.ID,
 		Direction:   "in",
@@ -142,7 +142,7 @@ func TestInventoryHandler_CreateCheck(t *testing.T) {
 
 	// 先创建库存
 	db.Create(&model.Inventory{
-		ShopID:     shop.ID,
+		ShopID:      shop.ID,
 		WarehouseID: &warehouse.ID,
 		ProductID:   &product.ID,
 		Quantity:    50,