feat(asr-pipeline): merge PR #1 webauth/CSRF/locking hardening and web_password fallback

servers/tools-pve/asr-pipeline/asrservice/db.py

@@ -49,6 +49,8 @@ def connect() -> sqlite3.Connection:
     """)
     cols = {r[1] for r in con.execute("PRAGMA table_info(intake_job)")}
     default_prov = CFG.asr_provider or "qwen3cam"
+    if default_prov not in {"qwen3cam", "soniox", "gemini", "openai", "grok"}:
+        default_prov = "qwen3cam"
     additions = {
         "draft": "TEXT NOT NULL DEFAULT ''",
         "result": "TEXT NOT NULL DEFAULT ''",
@@ -104,7 +106,7 @@ def update_job(job_id: str, status: str, detail: str = "", **fields: Any) -> boo
         raise ValueError(f"invalid status: {status}")
     allowed = {
         "transcript", "draft", "result", "sha256", "attempts",
-        "error_code", "asr_provider", "asr_model", "title", "context",
+        "error_code", "asr_provider", "asr_model", "title", "context", "stored_name",
     }
     changes = {k: v for k, v in fields.items() if k in allowed and v is not None}
     sets = ["status=?", "updated_at=?", "detail=?"]