fix(awooop): 移除 tenants public api 內部控制鍵

apps/api/tests/test_awooop_tenant_asset_inventory.py

@@ -14,6 +14,12 @@ FORBIDDEN_PUBLIC_MARKERS = [
     "AWOOOI / " + "AwoooP / " + "IwoooS",
     "Tsen" + "Yang Website",
     "Bitan " + "Pharmacy",
+    "repo_owner_namespace_redacted=true",
+    "raw_repository_namespace_visible=false",
+    "public_api_raw_repo_namespace_allowed=false",
+    "read_only_inventory_only=true",
+    "runtime_execution_authorized=false",
+    "action_buttons_allowed=false",
 ]
 
 
@@ -93,6 +99,8 @@ def test_tenant_asset_inventory_merges_products_routes_and_repos() -> None:
     assert "blocked_waiting_" not in inventory_payload
     assert "observe_scope_review" not in inventory_payload
     assert all(marker not in inventory_payload for marker in FORBIDDEN_PUBLIC_MARKERS)
+    assert "只讀資產台帳" in " ".join(inventory["boundaries"])
+    assert all("=" not in boundary for boundary in inventory["boundaries"])
     assert {item["risk"] for item in inventory["source_repos"]}.issubset(
         {"high", "medium", "low", "unknown"}
     )
@@ -135,5 +143,5 @@ def test_tenant_response_model_keeps_asset_inventory_contract() -> None:
     response_payload = response.model_dump_json()
     assert "owenhytsai" not in response_payload
     assert "nexu-io" not in response_payload
-    assert all(marker not in response_payload for marker in FORBIDDEN_PUBLIC_MARKERS[:3])
+    assert all(marker not in response_payload for marker in FORBIDDEN_PUBLIC_MARKERS)
     assert response.asset_inventory.source_repos[0].source_namespace_redacted is True