H-300: wire Captain Skills into Web runtime (#48)

* H-300: wire Captain Skills into Web runtime

* H-300: enforce effective model and conservative skill budget

* H-300: fix CI gosec step

* ci: extend golangci-lint timeout

* fix lint findings across backend

* fix(push): resolve delivery protocol blockers

* test(repository): close SQLite test databases

* test(repository): reuse SQLite schema per package

* H-307: restore backend Go cache in CI

* H-307: prefetch modules before cold lint

* H-307: resolve govulncheck security gate

* H-307: build lint with patched Go toolchain

* H-307: clear remaining security scan findings

---------

Co-authored-by: Rogee <rogee@ipao.vip>

backend/internal/handler/api/v1/bot_trigger_config_handler.go

@@ -126,7 +126,7 @@ func (h *BotTriggerConfigHandler) Create(c *gin.Context) {
 		config.QueryOperator = "and"
 	}
 	// Default to active if not explicitly set
-	if !config.Active && req.Active == false {
+	if !config.Active && !req.Active {
 		// Only default to active when the field was not provided in JSON
 		// (JSON deserialization defaults bool to false)
 		config.Active = true