fix(HEL-494): 切断网站生产装配外源直连，iFinD 与实时观察改走中枢

生产 gateway 不再实例化 iFinD、东财图和免费实时聚合器；问财与竞价快照作为中枢内部数据源。全站阻断外源测试覆盖日K、报价、图表、问财和竞价快照。

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: multica-agent <github@multica.ai>

tests/test_data_gateway.py

@@ -35,7 +35,7 @@ class DataGatewayTests(unittest.TestCase):
         with self.assertRaises(DataPolicyError):
             policy.assert_allowed("market.level2", "unresolved", "display")
 
-    def test_gateway_uses_live_token_supplier_and_shared_ifind(self) -> None:
+    def test_gateway_uses_live_token_supplier_and_hub_proxies(self) -> None:
         token = {"value": "first"}
         gateway = build_data_gateway(
             {"ifind_refresh_token": "refresh", "ifind_access_token": "access"},
@@ -44,7 +44,14 @@ class DataGatewayTests(unittest.TestCase):
         self.assertEqual(gateway.tushare().token, "first")
         token["value"] = "second"
         self.assertEqual(gateway.tushare().token, "second")
-        self.assertIs(gateway.chart_data.ifind, gateway.ifind)
+        self.assertIs(gateway.ifind, gateway.ifind_provider.client)
+        self.assertIs(gateway.chart_data.datahub, gateway.datahub)
+        self.assertIsNone(gateway.chart_data.ifind)
+        from backend.data.datahub.ifind_proxy import HubIfindProxy
+        from backend.data.datahub.realtime_proxy import HubRealtimeProxy
+
+        self.assertIsInstance(gateway.ifind, HubIfindProxy)
+        self.assertIsInstance(gateway.realtime_observer, HubRealtimeProxy)
 
     def test_server_has_no_direct_runtime_tushare_construction(self) -> None:
         source = (
@@ -60,18 +67,23 @@ class DataGatewayTests(unittest.TestCase):
     def test_provider_construction_has_unique_declared_owners(self) -> None:
         root = Path(__file__).resolve().parents[1]
         owners = {
-            "EastmoneyChartClient": {"backend/data/gateway.py"},
-            "IfindHttpClient": {"backend/data/gateway.py"},
             "IfindProvider": {"backend/data/gateway.py"},
             "MarketChartClient": {"backend/data/gateway.py"},
             "TushareClient": {"backend/features/market/service.py"},
             "TushareProvider": {"backend/data/gateway.py"},
-            "WebRealtimeAggregator": {"backend/data/gateway.py"},
             "DatahubClient": {"backend/data/gateway.py"},
             "DatahubAwareTushareClient": {"backend/data/gateway.py"},
             "DatahubBridge": {"backend/data/gateway.py"},
+            "HubIfindProxy": {"backend/data/gateway.py"},
+            "HubRealtimeProxy": {"backend/data/gateway.py"},
         }
         found = {name: set() for name in owners}
+        forbidden = {
+            "IfindHttpClient": set(),
+            "EastmoneyChartClient": set(),
+            "WebRealtimeAggregator": set(),
+        }
+        found_forbidden = {name: set() for name in forbidden}
         for path in (root / "backend").rglob("*.py"):
             relative = path.relative_to(root).as_posix()
             tree = ast.parse(path.read_text(encoding="utf-8"), filename=str(path))
@@ -81,7 +93,10 @@ class DataGatewayTests(unittest.TestCase):
                 name = getattr(node.func, "id", None) or getattr(node.func, "attr", None)
                 if name in found:
                     found[name].add(relative)
+                if name in found_forbidden:
+                    found_forbidden[name].add(relative)
         self.assertEqual(found, owners)
+        self.assertEqual(found_forbidden, forbidden)
         provider_source = (root / "backend/data/providers/tushare.py").read_text(
             encoding="utf-8"
         )