HH-443: establish production CI and supply-chain evidence (#93)

* ci: enforce production release gates

* ci: close release gate review blockers

* ci: preserve verified digests during promotion

* ci: serialize and verify release cleanup

* ci: build govulncheck with Shangwutong toolchain

---------

Co-authored-by: Rogee <rogee@ipao.vip>

frontend/app/javascript/dashboard/routes/index.spec.js

@@ -32,14 +32,9 @@ describe('#validateAuthenticateRoutePermission', () => {
       // Mock the store to simulate user not logged in
       store.getters.isLoggedIn = false;
 
-      // Mock window.location.assign
-      const mockAssign = vi.fn();
-      delete window.location;
-      window.location = { assign: mockAssign };
-
       validateAuthenticateRoutePermission(to, next);
 
-      expect(mockAssign).toHaveBeenCalledWith('/app/login');
+      expect(next).toHaveBeenCalledWith('/app/login');
     });
   });
 

frontend/app/javascript/dashboard/store/modules/specs/notifications/actions.spec.js

@@ -66,6 +66,7 @@ describe('#actions', () => {
       expect(commit.mock.calls).toEqual([
         [types.SET_NOTIFICATIONS_UI_FLAG, { isFetching: true }],
         [types.SET_NOTIFICATIONS_UI_FLAG, { isFetching: false }],
+        [types.SET_ALL_NOTIFICATIONS_LOADED],
       ]);
     });
   });

frontend/app/javascript/dashboard/store/storeFactory.spec.js

@@ -299,7 +299,7 @@ describe('storeFactory', () => {
           updatingItem: true,
         });
         expect(API.update).toHaveBeenCalledWith(1, { name: 'Updated' });
-        expect(commit).toHaveBeenCalledWith(mutationTypes.EDIT, data);
+        expect(commit).toHaveBeenCalledWith(mutationTypes.UPSERT, data);
         expect(commit).toHaveBeenCalledWith(mutationTypes.SET_UI_FLAG, {
           updatingItem: false,
         });

frontend/app/javascript/dashboard/store/utils/specs/api.spec.js

@@ -35,7 +35,7 @@ describe('#parseAPIErrorResponse', () => {
     ).toBe('Error Message [error]');
 
     expect(parseAPIErrorResponse('Error: 422 Failed')).toBe(
-      'Error: 422 Failed'
+      'Request failed. Please try again.'
     );
   });
 });

frontend/app/javascript/portal/specs/portalTheme.spec.js

@@ -90,7 +90,7 @@ describe('portalThemeHelper', () => {
       );
       removeQueryParamsFromUrl('theme');
       expect(window.history.replaceState).toHaveBeenCalledWith(
-        {},
+        null,
         '',
         'http://localhost:3000/?show_plain_layout=true'
       );