fix(dev): 支持长 worktree 路径下的 SSH control socket

- 从 socket 父目录执行 OpenSSH，保留绝对路径描述与实例归属
- 验证真实 tunnel 的创建、探测和精确关闭

Author: xiaoland

.changes/+worktree-ssh-socket.fixed.md

@@ -0,0 +1 @@
+修复深层 worktree 路径下开发数据库 SSH control socket 超长导致启动失败的问题，保留实例独立的 tunnel 与清理归属。

docs/40-deployment/development-environment.md

@@ -27,6 +27,8 @@ tracked files never own a hostname, user, key, or machine path.
 The SSH provider sends an allowlisted build context and one bounded Compose payload to the
 remote host. Remote services publish dynamic remote-loopback ports and an instance-owned
 OpenSSH control tunnel maps independent local-loopback ports to them.
+The descriptor keeps the absolute control-socket path, while SSH runs from its parent directory
+with the short socket name so long worktree paths do not exceed Unix-domain socket limits.
 
 Runtime state is written to `.runtime/database/<core-svc-instance>/`. Its `runtime.json`,
 `profile.json`, and `readiness.json` record:

scripts/dev_database_provider.py

@@ -418,11 +418,12 @@ def database_access_ready(
       (
         "ssh",
         "-S",
-        control_socket_path,
+        Path(control_socket_path).name,
         "-O",
         "check",
         provider.target,
       ),
+      cwd=Path(control_socket_path).parent,
       timeout=5,
     )
   except (OSError, subprocess.SubprocessError):
@@ -461,7 +462,7 @@ def open_database_access(
       "ssh",
       "-M",
       "-S",
-      str(socket_path),
+      socket_path.name,
       "-fnNT",
       "-o",
       "BatchMode=yes",
@@ -470,6 +471,8 @@ def open_database_access(
       *forwards,
       provider.target,
     ),
+    # OpenSSH appends a temporary suffix; absolute worktree paths can exceed AF_UNIX limits.
+    cwd=socket_path.parent,
     timeout=15,
   )
   return str(socket_path)
@@ -487,11 +490,12 @@ def close_database_access(
       (
         "ssh",
         "-S",
-        control_socket_path,
+        Path(control_socket_path).name,
         "-O",
         "exit",
         provider.target,
       ),
+      cwd=Path(control_socket_path).parent,
       timeout=5,
     )
   except (OSError, subprocess.SubprocessError):