避免联通实名回调因内部长度限制永久失效

将实名事件身份收敛为受 Outbox 上限约束的稳定摘要，并允许相同 CUCC 回调原子认领失败终态后重试。

Constraint: 运营商回调固定返回成功，公共 Outbox event_id 上限为 64 字符

Rejected: 扩大数据库字段 | 根因是不受控事件 ID，且无法解决旧 failed 回调被吞

Confidence: high

Scope-risk: moderate

Directive: 新增稳定事件 ID 时必须服从持久化长度上限；失败回调恢复必须使用条件更新原子认领

Tested: gofmt；git diff --cached --check

Not-tested: 按用户要求未运行自动化测试、构建或测试环境重放

internal/infrastructure/integrationlog/repository.go

@@ -256,6 +256,29 @@ func (r *Repository) ClaimExpiredInboundPending(ctx context.Context, integration
 	return result.RowsAffected == 1, nil
 }
 
+// ClaimFailedInbound 原子认领失败的入站回调并恢复为待处理状态。
+func (r *Repository) ClaimFailedInbound(ctx context.Context, integrationID string) (bool, error) {
+	if r == nil || r.db == nil {
+		return false, pkgerrors.New(pkgerrors.CodeInvalidStatus, "Integration Log 数据库未配置")
+	}
+	if strings.TrimSpace(integrationID) == "" {
+		return false, pkgerrors.New(pkgerrors.CodeInvalidParam, "入站 Integration Log 恢复参数无效")
+	}
+	now := r.now().UTC()
+	result := r.db.WithContext(ctx).Model(&model.IntegrationLog{}).
+		Where("integration_id = ? AND direction = ? AND result = ?", integrationID, constants.IntegrationDirectionInbound, constants.IntegrationResultFailed).
+		Updates(map[string]any{
+			"result": constants.IntegrationResultPending, "started_at": now,
+			"attempt": gorm.Expr("attempt + 1"), "updated_at": now,
+			"http_status": nil, "provider_code": nil, "provider_message": nil,
+			"response_summary": nil, "duration_ms": 0, "state_changed": false, "recovery_strategy": nil,
+		})
+	if result.Error != nil {
+		return false, pkgerrors.Wrap(pkgerrors.CodeDatabaseError, result.Error, "认领失败入站 Integration Log 失败")
+	}
+	return result.RowsAffected == 1, nil
+}
+
 func validateAttempt(input Attempt) error {
 	if input.Provider == "" || input.Operation == "" {
 		return pkgerrors.New(pkgerrors.CodeInvalidParam, "Integration Log 提供方和操作不能为空")