fix(txn+security): 仓储改 flush + 启动校验/兜底 + job.error 脱敏 + SSE 异常硬化

P0-1 SqlCredentialStore/save_draft 由自提交改 flush，端点/服务统一 commit
  （新增 CredentialStore.commit() 统一提交点；token 刷新落库显式提交）；
  补多凭据一请求中途失败整体回滚集成测试。
P0-2 启动校验 _fernet(enc_key) 快速失败 + catch-all Exception → ErrorEnvelope；
  credential_enc_key 改 SecretStr。
P0-3 run_job 异常分类：AppError 存 code+message，其余存通用文案不泄 str(exc)。
P0-4 评审/正文 SSE 失败先发 error 事件，尾部 commit 包 try/except。
P1-4 max_version 加 FOR UPDATE 行锁消除 TOCTOU。
P1-5 scan_overdue 谓词下推 + 批量 UPDATE RETURNING。
P1-10 移除 OAuth user_code 日志。
P2 provider_deps 改调网关 build_adapter；accept_service Committable Protocol；
  CORS 白名单收窄；request_id 安全字符集白名单；stdlib 日志接管；读端点 404 校验；
  httpx timeout；测试用合法 Fernet key；类型化响应模型(JobResponse/DimensionEntry/
  ReviewConflictView/selling_points)+路由 ErrorEnvelope responses（供 codegen）。

apps/api/ww_api/routers/style.py

@@ -29,10 +29,11 @@ from ww_core.orchestrator import run_style_extraction
 from ww_db import get_session
 from ww_llm_gateway import Gateway
 from ww_llm_gateway.types import Block, LlmRequest, Scope
-from ww_shared import AppError, ErrorCode
+from ww_shared import AppError, ErrorCode, ErrorEnvelope
 
 from ww_api.logging_config import get_logger
 from ww_api.schemas.style import (
+    DimensionEntry,
     RefineRequest,
     RefineResponse,
     StyleFingerprintResponse,
@@ -151,7 +152,22 @@ async def learn_style(
     return StyleLearnResponse(job_id=job.id)
 
 
-@router.get("/{project_id}/style")
+def _merge_dimensions(dimensions: dict[str, Any], evidence: dict[str, Any]) -> list[DimensionEntry]:
+    """把 DB 两列并行 dict 合并为 `list[DimensionEntry]`（按维度名稳定排序，便于前端展示）。"""
+    return [
+        DimensionEntry(
+            name=name,
+            value=str(dimensions[name]),
+            evidence=[str(e) for e in (evidence.get(name) or [])],
+        )
+        for name in sorted(dimensions)
+    ]
+
+
+@router.get(
+    "/{project_id}/style",
+    responses={404: {"model": ErrorEnvelope, "description": "项目或指纹不存在"}},
+)
 async def get_style(
     project_id: uuid.UUID,
     project_repo: ProjectRepoDep,
@@ -166,8 +182,7 @@ async def get_style(
     if latest is None:
         raise AppError(ErrorCode.NOT_FOUND, f"no style fingerprint for project: {project_id}")
     return StyleFingerprintResponse(
-        dimensions=latest.dimensions,
-        evidence=latest.evidence,
+        dimensions=_merge_dimensions(latest.dimensions, latest.evidence),
         version=latest.version,
     )