release(secrets-mcp): 0.5.10 — Web 模块化、性能与错误处理

- 拆分 web.rs 为 web/ 子模块；统一 client_ip 提取
- core: user_scope SQL 复用、env_map N+1 消除、FETCH_ALL 上限调整
- entries 列表页并行查询；PgPool 去 Arc；结构化 NotFound 等错误
- CI: SSH 私钥安全写入；crypto/hex 与依赖清理；MCP 输入长度校验
- AGENTS: API Key 明文存储设计说明

crates/secrets-mcp/src/tools.rs

@@ -1,4 +1,3 @@
-use std::sync::Arc;
 use std::time::Instant;
 
 use anyhow::Result;
@@ -218,12 +217,12 @@ fn mcp_err_invalid_encryption_key_logged(err: impl std::fmt::Display) -> rmcp::E
 
 #[derive(Clone)]
 pub struct SecretsService {
-    pub pool: Arc<PgPool>,
+    pub pool: PgPool,
     pub tool_router: rmcp::handler::server::router::tool::ToolRouter<SecretsService>,
 }
 
 impl SecretsService {
-    pub fn new(pool: Arc<PgPool>) -> Self {
+    pub fn new(pool: PgPool) -> Self {
         Self {
             pool,
             tool_router: Self::tool_router(),
@@ -1351,7 +1350,7 @@ impl SecretsService {
         ctx: RequestContext<RoleServer>,
     ) -> Result<CallToolResult, rmcp::ErrorData> {
         let t = Instant::now();
-        let (user_id, user_key) = Self::require_user_and_key(&ctx)?;
+        let (user_id, _user_key) = Self::require_user_and_key(&ctx)?;
         tracing::info!(
             tool = "secrets_rollback",
             ?user_id,
@@ -1377,7 +1376,6 @@ impl SecretsService {
             &resolved_name,
             resolved_folder.as_deref(),
             input.to_version,
-            &user_key,
             Some(user_id),
         )
         .await
@@ -1541,21 +1539,21 @@ impl SecretsService {
             count: i64,
         }
 
-        let folder_rows: Vec<CountRow> = sqlx::query_as(
+        let folder_rows: Vec<CountRow> = sqlx::query_as::<_, CountRow>(
             "SELECT folder AS name, COUNT(*) AS count FROM entries \
              WHERE user_id = $1 GROUP BY folder ORDER BY folder",
         )
         .bind(user_id)
-        .fetch_all(&*self.pool)
+        .fetch_all(&self.pool)
         .await
         .map_err(|e| mcp_err_internal_logged("secrets_overview", Some(user_id), e))?;
 
-        let type_rows: Vec<CountRow> = sqlx::query_as(
+        let type_rows: Vec<CountRow> = sqlx::query_as::<_, CountRow>(
             "SELECT type AS name, COUNT(*) AS count FROM entries \
              WHERE user_id = $1 GROUP BY type ORDER BY type",
         )
         .bind(user_id)
-        .fetch_all(&*self.pool)
+        .fetch_all(&self.pool)
         .await
         .map_err(|e| mcp_err_internal_logged("secrets_overview", Some(user_id), e))?;