feat(v2): 对账主体——周期查单收敛 + 已付订单抽查 + 退款修复扫描/卡滞告警 + main 装配 reconcile Runner

Task 5(债务 #6):两条腿收敛对账——① SyncPendingTask 调度 P2 gateway.SyncPendingAttempts
逐 pending attempt 查单收敛(防掉单);② PaidSpotCheckTask 对近期已付 attempt 反查渠道
核对金额/币种,漂移(渠道侧已退款/拒付而本地仍 paid)只告警不改状态。

追加两条 P4 T3 opus review 义务(该 review 产出时本 worktree 已分叉,P4 退款主体在主
checkout;这里对本 worktree 已有的 store.RefundStore/OrderStore 接口——P4 T2,在 base
里——建自愈扫描,设计为可在合并 P4 后继续工作):
- RefundApplyTask:退款修复扫描,重算 succeeded 退款之和,自愈「退款成功但订单卡 paid」
  的崩溃窗口(MarkRefundStatus 翻 succeeded 后、ApplyRefundToOrder 调用前崩溃)。候选订单
  =有 succeeded 退款的订单 ∪ 当前处于 refunding/partially_refunded 态的订单;走既有
  ApplyRefundToOrder 条件 UPDATE,目标态与当前态一致时跳过,天然幂等。
- RefundStuckAlertTask:卡滞 processing/manual_pending 退款超阈值(默认 30min)打 WARN,
  只观测不改状态;渠道退款查询 API 面留待后续。

main 装配前 4 job(order-expire/usage-refresh/sync-pending/paid-spotcheck)+ 上述两个退款
job 挂上 reconcile.Runner;acctPicker 的 limit_aware 用量源改用 reconcile.NewUsageSource
替 NopUsage。crypto 冷启动 Warm/孤儿扫描(AddCryptoJobs)留给 Task 6 追加。

config.go 新增 ReconcileConfig(含 Task 6 预留的 orphan_* 字段)+ 默认值;crypto.go 补
SetReservationLoader 构造后注入 setter(Task 6 依赖)。

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013nMthbVEmQquxBRKb9Fj8u

internal/store/refund_test.go

@@ -100,6 +100,68 @@ func TestApplyRefundToOrderFully(t *testing.T) {
 	}
 }
 
+// TestListDistinctOutTradeNosByStatus 供退款修复扫描定位「有 succeeded 退款」的候选
+// 订单(自愈依据):同订单多笔 succeeded 退款只应出现一次(distinct)。
+func TestListDistinctOutTradeNosByStatus(t *testing.T) {
+	db := model.OpenTestDB(t)
+	rs := NewRefundStore(db)
+	_ = rs.CreateRefund(&model.Refund{RefundID: "s1", OutTradeNo: "PAY-S1", AmountMinor: 100, Currency: "CNY", Status: model.RefundSucceeded})
+	_ = rs.CreateRefund(&model.Refund{RefundID: "s2", OutTradeNo: "PAY-S1", AmountMinor: 200, Currency: "CNY", Status: model.RefundSucceeded}) // 同单第二笔
+	_ = rs.CreateRefund(&model.Refund{RefundID: "s3", OutTradeNo: "PAY-S2", AmountMinor: 100, Currency: "CNY", Status: model.RefundSucceeded})
+	_ = rs.CreateRefund(&model.Refund{RefundID: "p1", OutTradeNo: "PAY-S3", AmountMinor: 100, Currency: "CNY", Status: model.RefundProcessing}) // 非 succeeded,不应命中
+
+	got, err := rs.ListDistinctOutTradeNosByStatus(model.RefundSucceeded, 50)
+	if err != nil {
+		t.Fatalf("list: %v", err)
+	}
+	if len(got) != 2 {
+		t.Fatalf("应 distinct 出 2 个 out_trade_no, got %d: %+v", len(got), got)
+	}
+	seen := map[string]bool{}
+	for _, no := range got {
+		seen[no] = true
+	}
+	if !seen["PAY-S1"] || !seen["PAY-S2"] {
+		t.Fatalf("命中集合不对: %+v", got)
+	}
+}
+
+// TestListStuckRefunds 供「卡滞 processing/manual_pending 退款告警」:只挑 updated_at
+// 早于阈值的 processing/manual_pending 行,requested/succeeded/failed 不命中。
+func TestListStuckRefunds(t *testing.T) {
+	db := model.OpenTestDB(t)
+	rs := NewRefundStore(db)
+	now := time.Date(2026, 7, 10, 12, 0, 0, 0, time.UTC)
+	mk := func(id, no string, st model.RefundStatus, updatedAgo time.Duration) {
+		if err := rs.CreateRefund(&model.Refund{RefundID: id, OutTradeNo: no, AmountMinor: 100, Currency: "CNY", Status: st}); err != nil {
+			t.Fatal(err)
+		}
+		if err := db.Model(&model.Refund{}).Where("refund_id = ?", id).
+			Update("updated_at", now.Add(-updatedAgo)).Error; err != nil {
+			t.Fatal(err)
+		}
+	}
+	mk("stuck-proc", "PAY-T1", model.RefundProcessing, 45*time.Minute)   // 超阈值 → 命中
+	mk("fresh-proc", "PAY-T2", model.RefundProcessing, 5*time.Minute)    // 未超 → 不命中
+	mk("stuck-manual", "PAY-T3", model.RefundManualPending, 2*time.Hour) // 超阈值 → 命中
+	mk("done", "PAY-T4", model.RefundSucceeded, 2*time.Hour)             // 已终态 → 不命中
+
+	got, err := rs.ListStuckRefunds([]model.RefundStatus{model.RefundProcessing, model.RefundManualPending}, now.Add(-30*time.Minute), 50)
+	if err != nil {
+		t.Fatalf("list: %v", err)
+	}
+	if len(got) != 2 {
+		t.Fatalf("应命中 2 笔卡滞, got %d: %+v", len(got), got)
+	}
+	seen := map[string]bool{}
+	for _, r := range got {
+		seen[r.RefundID] = true
+	}
+	if !seen["stuck-proc"] || !seen["stuck-manual"] {
+		t.Fatalf("命中集合不对: %+v", got)
+	}
+}
+
 func TestListManualPending(t *testing.T) {
 	db := model.OpenTestDB(t)
 	rs := NewRefundStore(db)