fix: audit remediation — SSE user scoping, FK transactional safety, UI error handling

- H4: scoped SSE import progress to exact userId match; non-HTTP events excluded from all subscribers
- H2: moved PRAGMA foreign_key_check inside SQLite transaction before COMMIT; violations rollback preserving old tables
- M1: removed dead axios-style error branch from extractErrorMessage (interceptor already unwraps)
- M2: split handleSave try/catch — save errors vs reload errors shown distinctly
- M3: added provider field validation before AI config test request
- Added SSE scoping regression tests (import service + controller)
- Added FK check failure rollback test (database-migrations.spec)
- Updated controller spec expectations for userId parameter

Co-authored-by: Code Review <branch-review>

apps/admin/src/pages/AiConfig/index.tsx

@@ -173,9 +173,17 @@ const AiConfigPage: React.FC = () => {
       await api.put('/ai/config', body);
       message.success('配置已保存');
       form.setFieldValue('apiKey', '');
-      await loadConfig();
     } catch (err: unknown) {
       message.error(extractErrorMessage(err, '保存失败'));
+      setSaving(false);
+      return;
+    }
+
+    // Reload config from server (non-fatal if it fails)
+    try {
+      await loadConfig();
+    } catch (err: unknown) {
+      message.warning(extractErrorMessage(err, '配置已保存，但刷新失败'));
     } finally {
       setSaving(false);
     }
@@ -186,7 +194,7 @@ const AiConfigPage: React.FC = () => {
   const handleTest = useCallback(async () => {
     try {
       // Validated fields: compatible requires baseUrl
-      const fieldsToValidate = ['timeoutMs'] as string[];
+      const fieldsToValidate = ['provider', 'timeoutMs'] as string[];
       if (currentProvider === 'OPENAI_COMPATIBLE') {
         fieldsToValidate.push('baseUrl');
       }