feat: 新增设备 API 拉取采集及配套处理能力

- 接入 NDRServer 告警和流量日志，支持凭据与任务管理
- 支持分页拉取、窗口拆分、调度优先级及 WAL 持久化后推进断点
- 增加迟到告警规则重放，优化多条泛化规则选择和事件时间处理
- 补充回归测试、数据库升级脚本及部署文档

haobang-security-dm/upgrade-doc/v2/influxdb/01-ensure-v2-bucket.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+: "${INFLUX_CONTAINER:?请设置 INFLUX_CONTAINER}"
+: "${INFLUX_ORG:?请设置 INFLUX_ORG}"
+
+INFLUX_CONFIG_PATH="${INFLUX_CONFIG_PATH:-/etc/influxdb2/influx-configs}"
+V2_BUCKET="${V2_BUCKET:-yelangbucket_v2}"
+RETENTION="${RETENTION:-720h}"
+SHARD_GROUP_DURATION="${SHARD_GROUP_DURATION:-24h}"
+
+command -v docker >/dev/null 2>&1 || {
+  echo "ERROR: 当前主机没有 docker 命令" >&2
+  exit 1
+}
+
+echo "检查 InfluxDB V2 Bucket: ${V2_BUCKET}"
+BUCKETS="$(docker exec "${INFLUX_CONTAINER}" influx bucket list \
+  --configs-path "${INFLUX_CONFIG_PATH}")"
+
+if printf '%s\n' "${BUCKETS}" | awk -v expected="${V2_BUCKET}" '
+  NR > 1 && $2 == expected { found=1 }
+  END { exit(found ? 0 : 1) }
+  '
+then
+  echo "Bucket 已存在，脚本不会修改："
+  printf '%s\n' "${BUCKETS}" | awk -v expected="${V2_BUCKET}" \
+    'NR == 1 || $2 == expected'
+  echo "请人工确认 Retention、Shard group duration 和应用 Token 权限。"
+  exit 0
+fi
+
+echo "创建 Bucket: name=${V2_BUCKET}, retention=${RETENTION}, shard=${SHARD_GROUP_DURATION}"
+docker exec "${INFLUX_CONTAINER}" influx bucket create \
+  --configs-path "${INFLUX_CONFIG_PATH}" \
+  --org "${INFLUX_ORG}" \
+  --name "${V2_BUCKET}" \
+  --retention "${RETENTION}" \
+  --shard-group-duration "${SHARD_GROUP_DURATION}"
+
+echo "创建后核验："
+docker exec "${INFLUX_CONTAINER}" influx bucket list \
+  --configs-path "${INFLUX_CONFIG_PATH}" \
+  | awk -v expected="${V2_BUCKET}" 'NR == 1 || $2 == expected'
+
+echo "PASS: V2 Bucket 已存在；脚本未删除或修改其他 Bucket。"