fix(ci): open controlled guard gates

scripts/security/awooop-controlled-automation-copy-guard.py

@@ -29,9 +29,13 @@ FORBIDDEN_FRAGMENTS = [
     "人工接手",
     "人工決策佇列",
     "人工關卡",
+    "人工 Gate",
     "人工 gate",
     "人工閘門",
     "人工升級",
+    "待 owner 複核",
+    "未批准不會執行",
+    "等 負責人審查",
     "owner review",
     "owner packet",
     "manual gate",
@@ -119,6 +123,16 @@ def _collect_awooop_message_violations(path: Path, root: Path) -> list[str]:
     return violations
 
 
+def _collect_forbidden_line_violations(path: Path, root: Path, text: str) -> list[str]:
+    violations: list[str] = []
+    for line_number, line in enumerate(text.splitlines(), start=1):
+        for fragment in FORBIDDEN_FRAGMENTS:
+            if fragment in line:
+                relative = path.relative_to(root)
+                violations.append(f"{relative}:{line_number}: forbidden {fragment!r}")
+    return violations
+
+
 def validate(root: Path) -> None:
     root = root.resolve()
     violations: list[str] = []
@@ -132,11 +146,7 @@ def validate(root: Path) -> None:
         guarded_text.append(text)
         if path.name.endswith(".json"):
             violations.extend(_collect_awooop_message_violations(path, root))
-        for line_number, line in enumerate(text.splitlines(), start=1):
-            for fragment in FORBIDDEN_FRAGMENTS:
-                if fragment in line:
-                    relative = path.relative_to(root)
-                    violations.append(f"{relative}:{line_number}: forbidden {fragment!r}")
+        violations.extend(_collect_forbidden_line_violations(path, root, text))
 
     alerts_route = root / ALERTS_ROUTE
     if not alerts_route.exists():