8fd31eca66
All checks were successful
CD Pipeline / build-and-deploy (push) Successful in 9m45s
前次修法（truncate random）不完整：host_restart_service(20 chars) 即使去掉 random
仍 68 bytes > 64 限制。
根本修法：UUID (36 chars) → base64url encode UUID bytes → 22 chars
nonce 格式：{action}:{b64url_uuid}:{timestamp}:{random}
最長 case: host_restart_service(20)+22+10+8+3 colons = 63 bytes
generate_callback_nonce: UUID → base64url 22 chars
parse_callback_data: 22-char b64url → 還原完整 UUID，handler 不需改動
全 action 驗證：approve/silence/reject/docker_restart/host_restart_service/renew_cert
全部 ≤ 63 bytes，UUID round-trip 正確。
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>