feat(delivery): integrate PostgreSQL delivery

server/.env.example

@@ -41,9 +41,11 @@ SSO_ENABLED=true
 BOOTSTRAP_ADMIN_USERNAME=admin
 BOOTSTRAP_ADMIN_PASSWORD=change-this-bootstrap-admin-password
 
-# MySQL service delivery (AWX is required when the scheduler is enabled)
+# Database delivery (MySQL/PostgreSQL; AWX is required when the scheduler is enabled)
 DELIVERY_SCHEDULER_ENABLED=false
 DELIVERY_DISPATCH_SECONDS=5
+DELIVERY_POLL_SECONDS=5
+DELIVERY_BUSINESS_LIMIT=1
 DELIVERY_CALLBACK_BASE_URL=http://authserver-backend.authserver.svc.cluster.local:8083
 DELIVERY_CREDENTIAL_SECRET=
 DELIVERY_RESERVATION_TTL_MINUTES=120
@@ -54,6 +56,7 @@ DELIVERY_HOST_INSTANCE_LIMIT=4
 # 数据盘挂载点白名单（逗号分隔，第一项为默认值）
 DELIVERY_DATA_DISKS=/data,/disk1,/mnt,/opt/mysql-delivery
 AWX_BASE_URL=
+# AWX API must point at the HTTP API endpoint, not a Minikube SSH port.
 AWX_TOKEN=
 AWX_USERNAME=
 AWX_PASSWORD=
@@ -66,6 +69,12 @@ DELIVERY_MYSQL_INSPECT_TIMEOUT_SECONDS=90
 # AWX Job Template ID for ansible/mysql-rollback.yml; required for automatic cleanup
 DELIVERY_ROLLBACK_TEMPLATE_ID=0
 DELIVERY_SERVICE_TOKEN=
+
+# PostgreSQL runtime secrets are injected by an AWX Credential and are never
+# persisted in xinfra task payloads:
+# XINFRA_POSTGRES_ADMIN_PASSWORD
+# XINFRA_POSTGRES_REPLICATION_PASSWORD
+# XINFRA_POSTGRES_REPLICATION_USER (optional, defaults to xinfra_replication)
 CLOUDDM_REGISTER_URL=
 CLOUDDM_DELETE_URL=
 CLOUDDM_API_TOKEN=