feat: 完善全栈打包质量门禁

在业务开发前补齐 lint、format、verify 与生产运行时契约，确保开发联调和 executable 打包链路可重复验证。

scripts/build.ts

@@ -3,7 +3,6 @@ import { dirname, relative, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { $ } from "bun";
 
-const rootDir = fileURLToPath(new URL("../", import.meta.url));
 const buildDir = fileURLToPath(new URL("../.build/", import.meta.url));
 const webDistDir = fileURLToPath(new URL("../dist/web/", import.meta.url));
 const executablePath = fileURLToPath(new URL("../dist/gateway-checker", import.meta.url));
@@ -67,16 +66,14 @@ async function listFiles(directory: string): Promise<string[]> {
     }),
   );
 
-  return files.flat();
+  return files.flat().sort((left, right) => normalize(left).localeCompare(normalize(right)));
 }
 
 async function writeGeneratedAssets(indexPath: string, assetFiles: string[]) {
   const imports = [
     `import type { StaticAssets } from "../src/server/app";`,
     `import indexPath from "${toImportPath(indexPath)}" with { type: "file" };`,
-    ...assetFiles.map(
-      (file, index) => `import asset${index}Path from "${toImportPath(file)}" with { type: "file" };`,
-    ),
+    ...assetFiles.map((file, index) => `import asset${index}Path from "${toImportPath(file)}" with { type: "file" };`),
   ];
   const assetEntries = assetFiles.map((file, index) => {
     const urlPath = `/${normalize(relative(webDistDir, file))}`;