feat(alerting): add Telegram callback ingress sensor

ops/monitoring/alerts-unified.yml

@@ -903,6 +903,27 @@ groups:
           summary: "Alertmanager 實際 Webhook delivery 錯誤率 > 10%"
           description: "只使用經唯一 webhook receiver source contract 標記為 awoooi-webhook 的單調 delivery counter；Telegram 與 Agent99 poll 不納入分母。10 分鐘至少 5 次嘗試且失敗率持續超過 10%，進入 exact-host 受控診斷、修復與獨立 E2E verifier。"
 
+      - alert: TelegramCallbackIngressUnverified
+        expr: |
+          (
+            time() - awoooi_telegram_callback_ingress_last_receipt_timestamp_seconds > 300
+          )
+          or absent(awoooi_telegram_callback_ingress_last_receipt_timestamp_seconds)
+        for: 2m
+        labels:
+          severity: warning
+          layer: docker-188
+          component: openclaw
+          host: "188"
+          team: platform
+          auto_repair: "true"
+          alert_category: ai_agent
+          canonical_asset_id: service:openclaw:host188
+          domain_router: docker_container
+        annotations:
+          summary: "Telegram callback ingress 缺少 5 分鐘內 durable receipt"
+          description: "固定路由 service:openclaw:host188 -> ansible:188-openclaw-callback-forwarder；僅允許 exact Host188 Compose overlay 的 check-mode、bounded apply 與獨立 verifier，禁止 Kubernetes 或跨主機 fallback。"
+
       - alert: AlertChainBroken_Sentry
         expr: |
           sum(rate(awoooi_webhook_requests_total{source="sentry",status!="success"}[5m]))

ops/monitoring/alerts.yml

@@ -584,6 +584,27 @@ groups:
           summary: "Alertmanager 實際 Webhook delivery 錯誤率 > 10%"
           description: "只使用經唯一 webhook receiver source contract 標記為 awoooi-webhook 的單調 delivery counter；Telegram 與 Agent99 poll 不納入分母。10 分鐘至少 5 次嘗試且失敗率持續超過 10%，進入 exact-host 受控診斷、修復與獨立 E2E verifier。"
 
+      - alert: TelegramCallbackIngressUnverified
+        expr: |
+          (
+            time() - awoooi_telegram_callback_ingress_last_receipt_timestamp_seconds > 300
+          )
+          or absent(awoooi_telegram_callback_ingress_last_receipt_timestamp_seconds)
+        for: 2m
+        labels:
+          severity: warning
+          layer: docker-188
+          component: openclaw
+          host: "188"
+          team: platform
+          auto_repair: "true"
+          alert_category: ai_agent
+          canonical_asset_id: service:openclaw:host188
+          domain_router: docker_container
+        annotations:
+          summary: "Telegram callback ingress 缺少 5 分鐘內 durable receipt"
+          description: "固定路由 service:openclaw:host188 -> ansible:188-openclaw-callback-forwarder；僅允許 exact Host188 Compose overlay 的 check-mode、bounded apply 與獨立 verifier，禁止 Kubernetes 或跨主機 fallback。"
+
       - alert: AlertChainBroken_Sentry
         expr: |
           sum(rate(awoooi_webhook_requests_total{source="sentry",status!="success"}[5m]))