weichen
58b4c640d5
ci / vet-and-test (pull_request) Successful in 44s
Why: svc.sh delivers database credentials via environment per G1-7 (command lines are visible to every process on the host), but identity ensure/verify only accepted --dsn on the command line for pg-bound instances. Evidence: go test ./pkg/identity/... ok; build ok. Impact: --dsn remains highest priority, then AGENT_SYSTEM_DSN, then embedded SQLite; no storage changes. Refs: Dev U3 (real-combination CI gates); G1-7 credential discipline.