v1.10.88 품질·보안 개선과 미디어 카탈로그 database 전환을 반영한다.

세션·로그인 제한, ZIP/업로드 스트리밍, CSP 최소 강제와 Report-Only, Playwright 격리 검증을 추가하고 미디어 목록을 reconcile 후 database 모드로 고정한다.

Co-authored-by: Cursor <cursoragent@cursor.com>

docker-compose.test.yml

@@ -0,0 +1,27 @@
+services:
+  sori-studio-test-db:
+    image: postgres:16-alpine
+    container_name: sori-studio-test-db
+    environment:
+      POSTGRES_DB: sori_studio_test
+      POSTGRES_USER: sori_studio_test
+      POSTGRES_PASSWORD: sori_studio_test_password
+    ports:
+      - "127.0.0.1:${TEST_DB_PORT:-43091}:5432"
+    volumes:
+      - sori-studio-test-postgres:/var/lib/postgresql/data
+      - ./db/migrations:/docker-entrypoint-initdb.d:ro
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U sori_studio_test -d sori_studio_test"]
+      interval: 1s
+      timeout: 3s
+      retries: 30
+    networks:
+      - sori-studio-test-network
+
+volumes:
+  sori-studio-test-postgres:
+
+networks:
+  sori-studio-test-network:
+    driver: bridge