fix(shared-sqs): deadlock in create_queue, UI sent_at bug, Redis deploy, TLS ingress (v0.1.13-v0.1.14)

- fix: add SyncQueues.Unlock() before return in create_queue.go happy path (deadlock after first CreateQueue)
- fix: UI m.sent -> m.sent_at (message dates always showed as dash)
- feat: add deployments/k8s/redis.yaml (Redis persistence)
- chore: update deployment image to naeel/shared-sqs:v0.1.14
- chore: update ingress.yaml (TLS, qu.kube5s.ru)
- docs: add thinking log 2026-04-10

shared-sqs/app/router/router.go

@@ -39,13 +39,14 @@ func New(tenantStore *tenant.TenantStore, adminToken string) http.Handler {
 	// UI console — встроенный SPA, публичный доступ
 	r.PathPrefix("/ui").Handler(http.StripPrefix("/ui", ui.Handler()))
 
-	// SQS API — tenant auth middleware
-	sqsRouter := r.NewRoute().Subrouter()
-	sqsRouter.Use(auth.AuthMiddleware(tenantStore))
-	sqsRouter.HandleFunc("/", actionHandler).Methods("GET", "POST")
-	sqsRouter.HandleFunc("/{account}", actionHandler).Methods("GET", "POST")
-	sqsRouter.HandleFunc("/queue/{queueName}", actionHandler).Methods("GET", "POST")
-	sqsRouter.HandleFunc("/{account}/{queueName}", actionHandler).Methods("GET", "POST")
+	// SQS API — tenant auth middleware оборачивает каждый handler отдельно.
+	// r.NewRoute().Subrouter() с Use() некорректно работает в gorilla/mux v1.8.0
+	// при пустом prefix — ответы теряются. Поэтому используем явную обёртку.
+	sqsAuth := auth.AuthMiddleware(tenantStore)
+	r.Handle("/", sqsAuth(http.HandlerFunc(actionHandler))).Methods("GET", "POST")
+	r.Handle("/{account}", sqsAuth(http.HandlerFunc(actionHandler))).Methods("GET", "POST")
+	r.Handle("/queue/{queueName}", sqsAuth(http.HandlerFunc(actionHandler))).Methods("GET", "POST")
+	r.Handle("/{account}/{queueName}", sqsAuth(http.HandlerFunc(actionHandler))).Methods("GET", "POST")
 
 	return r
 }