H-300: wire Captain Skills into Web runtime (#48)

* H-300: wire Captain Skills into Web runtime

* H-300: enforce effective model and conservative skill budget

* H-300: fix CI gosec step

* ci: extend golangci-lint timeout

* fix lint findings across backend

* fix(push): resolve delivery protocol blockers

* test(repository): close SQLite test databases

* test(repository): reuse SQLite schema per package

* H-307: restore backend Go cache in CI

* H-307: prefetch modules before cold lint

* H-307: resolve govulncheck security gate

* H-307: build lint with patched Go toolchain

* H-307: clear remaining security scan findings

---------

Co-authored-by: Rogee <rogee@ipao.vip>

backend/internal/handler/api/v1/widget_test_handler_test.go

@@ -24,8 +24,9 @@ type WidgetTestHandlerTestSuite struct {
 
 func (s *WidgetTestHandlerTestSuite) SetupSuite() {
 	s.db, _ = gorm.Open(sqlite.Open(":memory:"), &gorm.Config{})
-	s.db.AutoMigrate(&model.WidgetTest{})
-
+	if err := s.db.AutoMigrate(&model.WidgetTest{}); err != nil {
+		panic(err)
+	}
 	repo := repository.NewWidgetTestRepo(s.db)
 	svc := service.NewWidgetTestService(repo)
 	s.handler = NewWidgetTestHandler(svc)
@@ -63,4 +64,4 @@ func (s *WidgetTestHandlerTestSuite) TestListByType_EmptyType() {
 	s.router.ServeHTTP(w, req)
 	// This hits Index route (with trailing slash), not ListByType
 	s.True(w.Code == http.StatusOK || w.Code == http.StatusMovedPermanently, "got %d", w.Code)
-}
+}