fix(publish): prevent stuck publish queue and duplicate posting

The desktop publish queue could stall for a long time and end users assumed
the software was broken. Root cause: a hung adapter held its execution slot
with no wall-clock timeout while auto-renewing its lease forever, so the
server never reclaimed it and every queued task behind it stayed 等待发布.
Auto-recovery also risked silently re-posting a non-idempotent article.

Client (Electron):
- per-task wall-clock deadline + abort; progress-gated lease renewal that
  stops and aborts a stalled task instead of renewing it forever
- decouple the concurrency cap from CDP-induced CPU/memory pressure
  (admission gate instead of self-throttling collapse); 15s watchdog pump
- all adapter network I/O now has fetch timeouts and honors context.signal;
  bounded image-upload concurrency with per-image timeout
- surface live adapter progress, elapsed time, queue position and a
  working-vs-queued distinction in the publish view

Server (tenant-api):
- publish lease-recovery worker (every 3m) + supporting index: reclaim
  expired in_progress publish leases, requeue (<3 attempts) or terminal-fail
- 3-minute lease TTL with client-presence-gated extension; max 3 attempts

Idempotency (production-grade core):
- durable publish_submit_started_at marker, set before the irreversible
  platform submit POST; recovery and abort route a maybe-submitted task to
  unknown (manual reconcile, kept in the dedup set) instead of re-posting
- desktop UI requires explicit confirmation before retrying a possibly-
  already-published task

Verified: go build/vet/test (incl. resolvePublishRecoveryOutcome), vue-tsc,
vitest 141/141, gofmt all clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

apps/desktop-client/src/preload/bridge.ts

@@ -7,6 +7,7 @@ import type {
   DesktopClientUpdateResult,
   DesktopPublishTaskListResponse,
   DesktopRuntimeSessionSyncRequest,
+  DesktopTaskInfo,
   ListDesktopPublishTasksParams,
 } from '@geo/shared-types'
 import type { IpcRendererEvent } from 'electron'
@@ -167,6 +168,8 @@ const desktopBridge = {
       ) as Promise<DesktopPublishTaskListResponse>,
     retryPublishTask: (taskId: string) =>
       ipcRenderer.invoke('desktop:retry-publish-task', taskId) as Promise<CreatePublishJobResponse>,
+    cancelPublishTask: (taskId: string) =>
+      ipcRenderer.invoke('desktop:cancel-publish-task', taskId) as Promise<DesktopTaskInfo>,
     openExternalUrl: (url: string) =>
       ipcRenderer.invoke('desktop:open-external-url', url) as Promise<null>,
     openSettingsWindow: () => ipcRenderer.invoke('desktop:open-settings-window') as Promise<null>,
@@ -197,7 +200,7 @@ const desktopBridge = {
       ipcRenderer.invoke('desktop:set-window-mode', mode, request) as Promise<null>,
     onRuntimeInvalidated: (
       listener: (event: {
-        reason: 'account-health' | 'publish-task-lease'
+        reason: 'account-health' | 'publish-task-lease' | 'publish-task-progress'
         at: number
         accountId?: string
         taskId?: string
@@ -206,7 +209,7 @@ const desktopBridge = {
       const wrapped = (
         _event: IpcRendererEvent,
         payload: {
-          reason: 'account-health' | 'publish-task-lease'
+          reason: 'account-health' | 'publish-task-lease' | 'publish-task-progress'
           at: number
           accountId?: string
           taskId?: string