加固部署隔离与备份来源契约（07-26-internal-ops-recovery-baseline）

scripts/restore-db.sh

@@ -83,11 +83,16 @@ if ! command -v docker >/dev/null 2>&1; then
   exit 1
 fi
 
-DB_CONTAINER="${DB_CONTAINER:-hyb-oa-trialrun-db}"
+DB_CONTAINER="${DB_CONTAINER:-}"
 POSTGRES_DB="${POSTGRES_DB:-}"
 POSTGRES_USER="${POSTGRES_USER:-}"
 POSTGRES_PASSWORD="${POSTGRES_PASSWORD:-}"
 
+if [[ -z "$DB_CONTAINER" ]]; then
+  echo "[ERR] Using docker fallback requires explicit DB_CONTAINER" >&2
+  exit 1
+fi
+
 if [[ -z "$POSTGRES_DB" || -z "$POSTGRES_USER" || -z "$POSTGRES_PASSWORD" ]]; then
   echo "[ERR] Using docker fallback requires POSTGRES_DB/POSTGRES_USER/POSTGRES_PASSWORD" >&2
   exit 1