fix(ci): 修复build-staging在PR模式下被跳过的问题

问题1 - cancel-in-progress踩踏：
- 将构建类job拆分到独立的 .gitea/workflows/ci-build.yml
- 新workflow cancel-in-progress: false，构建启动后不被新commit顶掉
- 原ci-cd.yml保留4个门禁job（validate/unit/integration/frontend-lint）
- 门禁workflow保持cancel-in-progress: true，快速响应新commit

问题2 - buildx name冲突：
- 所有 docker buildx create/use/rm 的 ci-builder 改为动态名
- 动态命名：ci-builder-${{ github.run_id }}-${{ github.job }}
- 每个job每个run独立builder实例，多runner同机构建不冲突

变更统计：
- ci-cd.yml：910行 → 406行（仅门禁）
- ci-build.yml：新增535行（构建+部署+E2E）
- buildx实例：10处引用全部动态化

apps/web/src/pages/duplication/DuplicationDetail.tsx

@@ -33,8 +33,9 @@ const formatSize = (bytes: number) => {
 /** 格式化时长 */
 const formatDuration = (seconds?: number) => {
   if (!seconds) return "-";
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
+  const totalSec = Math.round(seconds);
+  const m = Math.floor(totalSec / 60);
+  const s = totalSec % 60;
   return m > 0 ? `${m}分${s}秒` : `${s}秒`;
 };
 

apps/web/src/pages/duplication/DuplicationResults.tsx

@@ -59,8 +59,9 @@ const formatSize = (bytes: number) => {
 /** 格式化时长 */
 const formatDuration = (seconds?: number) => {
   if (!seconds) return "-";
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
+  const totalSec = Math.round(seconds);
+  const m = Math.floor(totalSec / 60);
+  const s = totalSec % 60;
   return m > 0 ? `${m}分${s}秒` : `${s}秒`;
 };
 

apps/web/src/pages/edit-plans/EditPlans.tsx

@@ -86,8 +86,9 @@ const STATUS_CONFIG: Record<
 /** 格式化时长 */
 const formatDuration = (seconds: number): string => {
   if (seconds <= 0) return "-";
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
+  const totalSec = Math.round(seconds);
+  const m = Math.floor(totalSec / 60);
+  const s = totalSec % 60;
   if (m === 0) return `${s}秒`;
   return `${m}分${s > 0 ? `${s}秒` : ""}`;
 };

apps/web/src/pages/templates/TemplateLibrary.tsx

@@ -92,8 +92,9 @@ const gradientForCategory = (category: string): string => {
 /** 格式化时长 */
 const formatDuration = (seconds: number | undefined | null): string => {
   if (!seconds || seconds <= 0) return "0秒";
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
+  const totalSec = Math.round(seconds);
+  const m = Math.floor(totalSec / 60);
+  const s = totalSec % 60;
   if (m === 0) return `${s}秒`;
   return `${m}分${s > 0 ? `${s}秒` : ""}`;
 };

scripts/build_release_images.sh

@@ -60,6 +60,9 @@ fi
 # 默认只读不写，防止 feature 分支污染主缓存
 # 只有 develop/main 分支才写回缓存
 BRANCH_NAME="${GITHUB_REF_NAME:-${CI_COMMIT_BRANCH:-unknown}}"
+# 清理本地旧镜像
+docker rmi -f "$API_IMAGE" "$API_LATEST" 2>/dev/null || true
+
 if [ "$USE_CACHE" -eq 1 ]; then
   docker buildx build \
     --build-arg APP_VERSION="$VERSION" \
@@ -89,6 +92,9 @@ build_with_cache() {
     echo "  cache: read-only from ${CACHE_REGISTRY}/${IMG_NAME}-cache:${CACHE_TAG_PRIMARY}"
   fi
 
+  # 清理本地旧镜像，避免 buildx --load 报 already exists 错误
+  docker rmi -f "$IMG_NAME:$VERSION" 2>/dev/null || true
+
   if [ "$USE_CACHE" -eq 1 ]; then
     if [ -n "$CACHE_TO" ]; then
       docker buildx build \
@@ -119,6 +125,9 @@ build_with_cache "api" "infra/docker/api.Dockerfile" \
 docker tag "$API_IMAGE" "$API_LATEST"
 
 echo "=== Building Worker image ==="
+# 清理本地旧镜像
+docker rmi -f "$WORKER_IMAGE" "$WORKER_LATEST" 2>/dev/null || true
+
 if [ "$USE_CACHE" -eq 1 ]; then
   docker buildx build \
     --build-arg APP_VERSION="$VERSION" \
@@ -148,6 +157,9 @@ docker run --rm \
 
 test -f apps/web/dist/index.html
 
+# 清理本地旧镜像
+docker rmi -f "$WEB_IMAGE" 2>/dev/null || true
+
 if [ "$USE_CACHE" -eq 1 ]; then
   docker buildx build \
     --cache-from "type=registry,ref=${CACHE_REGISTRY}/web-cache:${CACHE_TAG_PRIMARY},ignore-error=true" \