完善 readiness、发布追溯与敏感治理（07-15-production-trust-closeout-cleanup）

scripts/check-minimal.sh

@@ -3,21 +3,31 @@ set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 
-echo "=== [1/5] Process Contract Gate ==="
+echo "=== [1/7] Process Contract Gate ==="
 (
   cd "$ROOT_DIR"
   node scripts/qa/check-process-contract.mjs --baseline
 )
 
 echo ""
-echo "=== [2/5] Server Prisma Validate ==="
+echo "=== [2/7] Governance + Sensitive Content ==="
+(
+  cd "$ROOT_DIR"
+  node scripts/qa/check-trellis-governance.mjs
+  node scripts/qa/check-sensitive-content.mjs
+  bash -n scripts/qa/run-live-smoke-readiness.sh
+  bash -n deploy/trialrun/deploy.sh
+)
+
+echo ""
+echo "=== [3/7] Server Prisma Validate ==="
 (
   cd "$ROOT_DIR/server"
   npm run prisma:validate
 )
 
 echo ""
-echo "=== [3/5] Server Static Checks ==="
+echo "=== [4/7] Server Static Checks ==="
 (
   cd "$ROOT_DIR/server"
   node --check src/routes/reimbursements.js
@@ -69,7 +79,14 @@ echo "=== [3/5] Server Static Checks ==="
 )
 
 echo ""
-echo "=== [4/5] Client Typecheck + Build ==="
+echo "=== [5/7] Server Unit Tests ==="
+(
+  cd "$ROOT_DIR/server"
+  npm test
+)
+
+echo ""
+echo "=== [6/7] Client Typecheck + Build ==="
 (
   cd "$ROOT_DIR/client"
   npm run typecheck
@@ -77,7 +94,7 @@ echo "=== [4/5] Client Typecheck + Build ==="
 )
 
 echo ""
-echo "=== [5/5] Feature Matrix Consistency ==="
+echo "=== [7/7] Feature Matrix Consistency ==="
 (
   cd "$ROOT_DIR"
   python3 scripts/validate-feature-matrix.py