maintenance: scope AI conversations by creator

[zqr10159]

Summary

• enforce the authenticated creator across conversation and SOP schedule create/list/get/update/delete/toggle operations
• validate the persisted schedule owner against the target conversation before execution and again before result or error delivery
• prevent protected monitor creation from loading secure-form data through an unscoped conversation lookup
• disable ownerless legacy schedules, add creator-oriented indexes, and document the manual recovery path
• keep background execution independent of a request-thread subject while persisting the validated owner on generated messages

Upgrade impact

• conversations with a null creator remain isolated from all user queries; no ownership is guessed automatically
• migration V182 disables schedules with a null or blank creator while preserving the rows for administrator review
• schedules with a missing conversation or a creator mismatch are disabled before they can execute
• the upgrade guide describes how to verify and restore an intended owner without bulk assignment

Validation

• regression proof on the previous head: four creator-boundary tests failed because the service trusted a request creator and allowed cross-creator get/list/delete
• ./mvnw -pl hertzbeat-ai -am -Dtest=SopScheduleServiceImplTest,SopScheduleExecutorTest,ConversationServiceImplTest,ChatConversationTest test -DskipITs -Dsurefire.failIfNoSpecifiedTests=false -DfailIfNoTests=false
• ./mvnw -pl hertzbeat-ai -Dtest=MonitorToolsImplTest,SopScheduleServiceImplTest,SopScheduleExecutorTest,ConversationServiceImplTest test -DskipITs -Dsurefire.failIfNoSpecifiedTests=false -DfailIfNoTests=false (20 tests)
• ./mvnw -pl hertzbeat-ai test -DskipITs (50 tests)
• ./mvnw -pl hertzbeat-startup -am -DskipTests package
• H2 fresh-migration proof: V181 followed by V182 preserved the owned schedule, disabled the ownerless schedule, and created the composite index
• repository no-hardcoded-CJK scan and git diff --cached --check

AI assistance: used for draft implementation and test iteration.
Human validation: focused ownership tests, the complete AI module suite, a fresh H2 migration proof, and the startup source package reactor all completed successfully; Checkstyle reported no violations.
Risk notes: legacy ownerless conversations and schedules require deliberate administrator recovery after verifying the target conversation owner; the migration does not guess or bulk-assign ownership.

[zqr10159]

Author remediation update:

The ownership boundary now includes conversations, messages, stream and security-data reads, plus every SOP schedule create, list, get, update, delete, and toggle path. A schedule persists its owner, creation verifies the target conversation, and background execution revalidates that persisted relationship without a login-time subject. Historical null creators use an explicit migration and isolation path with supporting indexes.

Two-user IDOR and scheduled-message injection regressions are covered. Focused AI tests (50) and the startup reactor (24 modules) passed locally; the current GitHub backend, E2E, docs, license, and label checks are green. The author-side blocker is resolved; maintainer review is still required.