feat(enrichment): add screenshot pipeline with browser fetch and storage

- Add screenshot pipeline service for capturing page screenshots via headless browser
- Add browser fetch service with Puppeteer-based rendering
- Add screenshot storage service with local filesystem support
- Add screenshot repository with DB schema migration (0011)
- Add enrichment config schema fields for screenshot settings
- Update open-graph provider to support screenshot capture
- Enhance safe-fetch with configurable retries and user agent
- Add comprehensive test suite for all new services
- Update Dockerfile with Chromium and Puppeteer dependencies
- Add design docs for screenshot and knowledge base features

Author: Innei

apps/core/src/constants/cache.constant.ts

@@ -32,6 +32,9 @@ export enum RedisKeys {
   AnalyzeAggregate = 'analyze_aggregate',
   AnalyzeTrafficSource = 'analyze_traffic_source',
   AnalyzeDeviceDistribution = 'analyze_device_distribution',
+
+  /** Enrichment 截图 LRU touchAccess 节流 NX 锁 */
+  EnrichmentScreenshotTouch = 'enrichment_screenshot_touch',
 }
 export const API_CACHE_PREFIX = 'mx-api-cache:'
 export enum CacheKeys {

apps/core/src/database/migrations/0011_enrichment_screenshots.sql

@@ -0,0 +1,15 @@
+-- migration-lint:allow=no-bare-create-index reason=enrichment_screenshots is a brand-new table, empty at deploy time
+CREATE TABLE IF NOT EXISTS "enrichment_screenshots" (
+	"enrichment_id" text PRIMARY KEY NOT NULL,
+	"object_key" text NOT NULL,
+	"bytes" integer NOT NULL,
+	"width" integer NOT NULL,
+	"height" integer NOT NULL,
+	"blurhash" text,
+	"palette" jsonb,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"last_accessed_at" timestamp with time zone DEFAULT now() NOT NULL,
+	CONSTRAINT "enrichment_screenshots_enrichment_id_enrichment_cache_id_fk" FOREIGN KEY ("enrichment_id") REFERENCES "public"."enrichment_cache"("id") ON DELETE cascade ON UPDATE no action
+);
+--> statement-breakpoint
+CREATE INDEX IF NOT EXISTS "enrichment_screenshots_lru_idx" ON "enrichment_screenshots" USING btree ("last_accessed_at");