ci: Playwright 后 SSH moicen 只读校验（PG/Redis/日志）

新增 scripts/moicen-remote-readonly-check.sh；同源 PR/push 跑 MOICEN_SSH_*。

Made-with: Cursor

scripts/moicen-remote-readonly-check.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+# 在 moicen 本机执行（由 CI 通过 ssh … bash -s 注入）。只读：PG 探活、redis ping、日志 tail。
+set -euo pipefail
+
+echo "=== moicen readonly verify $(date -u +%Y-%m-%dT%H:%M:%SZ) ==="
+
+HTYPROC_ENV="${HOME}/works/huike-back/htyproc/.env"
+if [[ ! -r "$HTYPROC_ENV" ]]; then
+  echo "ERROR: cannot read ${HTYPROC_ENV}"
+  exit 1
+fi
+
+set -a
+# shellcheck disable=SC1090
+source "$HTYPROC_ENV"
+set +a
+
+if [[ -z "${TS_DATABASE_URL:-}" ]]; then
+  echo "ERROR: TS_DATABASE_URL unset after sourcing ${HTYPROC_ENV}"
+  exit 1
+fi
+
+echo "--- PostgreSQL (TS_DATABASE_URL) ---"
+psql "$TS_DATABASE_URL" -v ON_ERROR_STOP=1 -c "SELECT 1 AS connectivity_ok;"
+
+echo "--- Redis ---"
+redis-cli ping
+
+echo "--- htyproc log (tail, last 50 lines) ---"
+tail -n 50 "${HOME}/works/huike-back/htyproc/htyproc.nohup.log" 2>/dev/null || echo "(no htyproc log)"
+
+echo "--- OpenResty error.log (tail, last 30 lines) ---"
+tail -n 30 /usr/local/openresty/nginx/logs/error.log 2>/dev/null || echo "(no nginx error log)"
+
+echo "=== moicen readonly verify OK ==="