补齐 API 发布归档中的 Pingora TLS 同步脚本

API Build 归档加入 pingora-tls-cert-sync.mjs
API Deploy 复制并授权 Pingora TLS 证书同步脚本
生产运维门禁覆盖 TLS 同步脚本归档要求
共享记忆记录 Jenkins 归档清单漏项排障经验

scripts/check-production-ops-guardrails.mjs

@@ -6098,6 +6098,12 @@ const checks = [
       'build/${env.EFFECTIVE_BUILD_VERSION}/scripts/deploy/pingora-gateway-env-shadow-switch.mjs',
     reason: 'API Build 归档必须包含 Pingora gateway env shadow 切换脚本。',
   },
+  {
+    file: 'jenkins/Jenkinsfile.production-api-build',
+    includes:
+      'build/${env.EFFECTIVE_BUILD_VERSION}/scripts/deploy/pingora-tls-cert-sync.mjs',
+    reason: 'API Build 归档必须包含 Pingora TLS 证书同步脚本。',
+  },
   {
     file: 'jenkins/Jenkinsfile.production-api-build',
     includes:
@@ -6246,6 +6252,12 @@ const checks = [
       'build/${params.BUILD_VERSION}/scripts/deploy/pingora-gateway-env-shadow-switch.mjs',
     reason: 'API Deploy 必须复制 build 产物内的 Pingora gateway env shadow 切换脚本。',
   },
+  {
+    file: 'jenkins/Jenkinsfile.production-api-deploy',
+    includes:
+      'build/${params.BUILD_VERSION}/scripts/deploy/pingora-tls-cert-sync.mjs',
+    reason: 'API Deploy 必须复制 build 产物内的 Pingora TLS 证书同步脚本。',
+  },
   {
     file: 'jenkins/Jenkinsfile.production-api-deploy',
     includes: 'build/${params.BUILD_VERSION}/scripts/deploy/maintenance-off.sh',