fix(publish): prevent stuck publish queue and duplicate posting

The desktop publish queue could stall for a long time and end users assumed
the software was broken. Root cause: a hung adapter held its execution slot
with no wall-clock timeout while auto-renewing its lease forever, so the
server never reclaimed it and every queued task behind it stayed 等待发布.
Auto-recovery also risked silently re-posting a non-idempotent article.

Client (Electron):
- per-task wall-clock deadline + abort; progress-gated lease renewal that
  stops and aborts a stalled task instead of renewing it forever
- decouple the concurrency cap from CDP-induced CPU/memory pressure
  (admission gate instead of self-throttling collapse); 15s watchdog pump
- all adapter network I/O now has fetch timeouts and honors context.signal;
  bounded image-upload concurrency with per-image timeout
- surface live adapter progress, elapsed time, queue position and a
  working-vs-queued distinction in the publish view

Server (tenant-api):
- publish lease-recovery worker (every 3m) + supporting index: reclaim
  expired in_progress publish leases, requeue (<3 attempts) or terminal-fail
- 3-minute lease TTL with client-presence-gated extension; max 3 attempts

Idempotency (production-grade core):
- durable publish_submit_started_at marker, set before the irreversible
  platform submit POST; recovery and abort route a maybe-submitted task to
  unknown (manual reconcile, kept in the dedup set) instead of re-posting
- desktop UI requires explicit confirmation before retrying a possibly-
  already-published task

Verified: go build/vet/test (incl. resolvePublishRecoveryOutcome), vue-tsc,
vitest 141/141, gofmt all clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

server/internal/tenant/repository/generated/desktop_task.sql.go

@@ -420,7 +420,7 @@ func (q *Queries) CreateDesktopTaskAttempt(ctx context.Context, arg CreateDeskto
 
 const extendDesktopTaskLease = `-- name: ExtendDesktopTaskLease :one
 UPDATE desktop_tasks
-SET lease_expires_at = now() + interval '10 minutes',
+SET lease_expires_at = now() + CASE WHEN kind = 'publish' THEN interval '3 minutes' ELSE interval '10 minutes' END,
     updated_at = now()
 WHERE desktop_id = $1
   AND lease_token_hash = $2
@@ -564,6 +564,10 @@ WITH candidate AS (
         $4::text IS NULL
         OR dt.kind = $4::text
       )
+      AND (
+        dt.kind <> 'publish'
+        OR dt.attempts < 3
+      )
       AND (
         dt.kind <> 'publish'
         OR NOT EXISTS (
@@ -584,9 +588,10 @@ WITH candidate AS (
 UPDATE desktop_tasks AS t
 SET active_attempt_id = $1,
     lease_token_hash = $2,
-    lease_expires_at = now() + interval '10 minutes',
+    lease_expires_at = now() + CASE WHEN t.kind = 'publish' THEN interval '3 minutes' ELSE interval '10 minutes' END,
     status = 'in_progress',
     attempts = t.attempts + 1,
+    started_at = COALESCE(t.started_at, now()),
     updated_at = now()
 FROM candidate
 WHERE t.desktop_id = candidate.desktop_id
@@ -650,13 +655,18 @@ const leaseQueuedDesktopTaskByDesktopID = `-- name: LeaseQueuedDesktopTaskByDesk
 UPDATE desktop_tasks
 SET active_attempt_id = $1,
     lease_token_hash = $2,
-    lease_expires_at = now() + interval '10 minutes',
+    lease_expires_at = now() + CASE WHEN kind = 'publish' THEN interval '3 minutes' ELSE interval '10 minutes' END,
     status = 'in_progress',
     attempts = attempts + 1,
+    started_at = COALESCE(started_at, now()),
     updated_at = now()
 WHERE desktop_id = $3
   AND target_client_id = $4
   AND status = 'queued'
+  AND (
+    kind <> 'publish'
+    OR attempts < 3
+  )
 RETURNING id, desktop_id, job_id, tenant_id, workspace_id, target_account_id, target_client_id, platform_id, kind, payload, status, dedup_key, active_attempt_id, lease_token_hash, lease_expires_at, attempts, result, error, created_at, updated_at, priority, lane, lane_weight, source, scheduler_group_key, monitor_task_id, supersedes_task_id, control_flags, interrupt_generation, started_at, interrupted_at, interrupt_reason, enqueued_at
 `
 
@@ -754,7 +764,7 @@ SET status = CASE
     active_attempt_id = NULL,
     lease_token_hash = NULL,
     lease_expires_at = NULL,
-    attempts = attempts + CASE WHEN $1::text = 'retry' THEN 1 ELSE 0 END,
+    attempts = CASE WHEN $1::text = 'retry' THEN 0 ELSE attempts END,
     updated_at = now()
 WHERE desktop_id = $4
   AND workspace_id = $5