补强生产数据路径与备份来源护栏（07-26-internal-ops-recovery-baseline）

deploy/trialrun/validate-env-contract.js

@@ -243,6 +243,18 @@ for (const [name, content] of [
   }
 }
 
+for (const requiredFragment of [
+  'validate_data_path POSTGRES_DATA_DIR "$POSTGRES_DATA_DIR"',
+  'validate_data_path STORAGE_HOST_DIR "$STORAGE_HOST_DIR"',
+  'DEPLOY_DATA_MODE" != "existing"',
+  'DEPLOY_DATA_MODE" != "initialize"',
+  '"$POSTGRES_DATA_DIR/PG_VERSION"',
+]) {
+  if (!deployScriptContent.includes(requiredFragment)) {
+    errors.push(`deploy.sh 缺少正式部署数据目录护栏: ${requiredFragment}`);
+  }
+}
+
 for (const { filePath, content } of nginxContents) {
   const relativePath = path.relative(rootDir, filePath);
   if (content.includes('$proxy_add_x_forwarded_for')) {