refactor: 전체 코드베이스 감사 기반 리팩토링 — 버그 수정, 데드코드 제거, 보안 강화

P0 버그 수정:
- stock-lab: trade 엔드포인트 NameError 수정 (resp 미정의)
- deployer: 동시 배포 시 HTTP 200 → 503 반환

P1 데드코드 제거:
- stock-lab: fetch_overseas_news(), get_broker_cash() 제거
- blog-lab: 미사용 urlparse import 제거
- lotto-lab: 중복 inline import json 7곳 제거

P2 성능/효율 개선:
- lotto-lab: 가중 샘플링 3중 복사 → utils.weighted_sample_6() 통합
- lotto-lab: DB 인덱스 3개 추가 (recommendations, purchase_history)
- stock-lab: Pydantic .dict() → .model_dump() 호환
- blog-lab: 페이지네이션 상한(le=100) 추가

P3 보안/인프라:
- nginx: X-Frame-Options, X-Content-Type-Options, Referrer-Policy 헤더 추가
- docker-compose: travel-proxy CORS 와일드카드 → localhost 전용
- Dockerfile: music-lab, blog-lab, realestate-lab에 PYTHONUNBUFFERED 추가

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

blog-lab/app/main.py

@@ -1,7 +1,7 @@
 import os
 import uuid
 import logging
-from fastapi import FastAPI, HTTPException, BackgroundTasks
+from fastapi import FastAPI, HTTPException, BackgroundTasks, Query
 from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
 from typing import List, Optional
@@ -94,7 +94,7 @@ def start_research(req: ResearchRequest, background_tasks: BackgroundTasks):
 
 
 @app.get("/api/blog-marketing/research/history")
-def list_research(limit: int = 30):
+def list_research(limit: int = Query(30, ge=1, le=100)):
     return {"analyses": get_keyword_analyses(limit)}
 
 
@@ -285,7 +285,7 @@ def start_regenerate(post_id: int, background_tasks: BackgroundTasks):
 # ── 포스트 CRUD API ──────────────────────────────────────────────────────────
 
 @app.get("/api/blog-marketing/posts")
-def list_posts(status: str = None, limit: int = 50):
+def list_posts(status: str = None, limit: int = Query(50, ge=1, le=100)):
     return {"posts": get_posts(status=status, limit=limit)}
 
 
@@ -409,7 +409,7 @@ def start_market(post_id: int, background_tasks: BackgroundTasks):
 # ── 수익 추적 API ────────────────────────────────────────────────────────────
 
 @app.get("/api/blog-marketing/commissions")
-def list_commissions(post_id: int = None, limit: int = 100):
+def list_commissions(post_id: int = None, limit: int = Query(100, ge=1, le=100)):
     return {"commissions": get_commissions(post_id=post_id, limit=limit)}
 
 

blog-lab/app/web_crawler.py

@@ -4,8 +4,6 @@ import asyncio
 import logging
 import re
 from typing import Any, Dict, List, Optional, Tuple
-from urllib.parse import urlparse
-
 import httpx
 from bs4 import BeautifulSoup