feat: bind each node to the binary it runs at its first handshake; refuse changes that are not in a CI-signed manifest [CI]

backend/src/MoShiro.Backend.Storage.Sqlite/Schema.cs

@@ -5,7 +5,7 @@ namespace MoShiro.Backend.Storage.Sqlite;
 /// <summary>表结构。版本记录在 <c>PRAGMA user_version</c>；以后的迁移是按版本号追加的内置 SQL。</summary>
 internal static class Schema
 {
-    public const int CurrentVersion = 13;
+    public const int CurrentVersion = 14;
 
     public static void Migrate(SqliteConnection connection)
     {
@@ -221,6 +221,26 @@ internal static class Schema
             connection.Exec("PRAGMA user_version = 13");
             transaction.Commit();
         }
+
+        if (version < 14)
+        {
+            // 节点的二进制绑定：第一次握手成功时绑定正在运行的二进制的 SHA-256
+            using SqliteTransaction transaction = connection.BeginTransaction();
+            connection.Exec(
+                """
+                CREATE TABLE node_bindings (
+                  node_id TEXT PRIMARY KEY,
+                  sha256 TEXT NOT NULL,
+                  seq INTEGER NOT NULL,
+                  signed INTEGER NOT NULL,
+                  bound_at INTEGER NOT NULL,
+                  violation TEXT,
+                  violation_at INTEGER
+                )
+                """);
+            connection.Exec("PRAGMA user_version = 14");
+            transaction.Commit();
+        }
     }
 
     /// <summary>