WBS-7.3: GAS→Python 마이그레이션 5개 항목 완료 (F14, F02-F06)

- F14: late_chase_risk_score 검증
  * GAS가 유일한 생산처 (Python canonical 없음)
  * migration_action: KEEP_IN_GAS로 정정, status: DONE

- F02/F03/F04/F06: priceBasis 로직 포팅
  * formulas/price_basis_v1.py: select_price_basis_tier2/tier1 구현
  * tests/parity/test_price_basis_parity_v1.py: 8 parity 테스트 (모두 PASS)
  * GAS Number.isFinite() 의미론 정확히 재현 (math.isfinite 사용)
  * 모든 테스트 112/112 PASS

남은 작업 (4개):
- F05: decision_logic (action assignment)
- F07: score_logic (threshold addition)
- F10: routing decision
- F15: late_chase_gate

Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>

.gitea/workflows/kis_data_collection.yml

@@ -29,7 +29,67 @@ on:
   workflow_dispatch:            # 수동 실행 — 스케줄 검증/즉시 재시도용
 
 jobs:
-  collect-kis-data:
+  validate-kis-config-smoke:
+    if: github.event_name == 'workflow_dispatch'
+    runs-on: self-hosted
+    steps:
+    - name: Checkout Code
+      run: |
+        if [ -d .git ]; then
+          git remote set-url origin http://x-access-token:${{ secrets.GITHUB_TOKEN }}@192.168.123.100:8418/KimJaeHyun/myfinance.git
+        else
+          git init
+          git remote add origin http://x-access-token:${{ secrets.GITHUB_TOKEN }}@192.168.123.100:8418/KimJaeHyun/myfinance.git
+        fi
+        TARGET_REF="${GITHUB_REF_NAME:-main}"
+        git fetch origin "$TARGET_REF" --depth=1
+        git reset --hard FETCH_HEAD
+
+    - name: Setup Python Environment
+      run: |
+        VENV_BASE=/volume1/gitea/python_venv
+        REQ_HASH=$(md5sum tools/run_kis_data_collection_v1.py 2>/dev/null | cut -d' ' -f1 || echo "kis-default")
+        VENV="$VENV_BASE/$REQ_HASH"
+
+        if [ ! -f "$VENV/bin/python" ]; then
+          mkdir -p "$VENV_BASE"
+          /usr/bin/python3 -m venv "$VENV"
+          if [ ! -f "$VENV/bin/pip" ]; then
+            curl -sS https://bootstrap.pypa.io/pip/3.8/get-pip.py -o get-pip.py
+            "$VENV/bin/python" get-pip.py --quiet
+            rm get-pip.py
+          fi
+          "$VENV/bin/pip" install --upgrade pip --quiet
+          "$VENV/bin/pip" install requests beautifulsoup4 pyyaml --quiet
+          ls -dt "$VENV_BASE"/*/ 2>/dev/null | tail -n +3 | xargs rm -rf 2>/dev/null || true
+        fi
+        "$VENV/bin/pip" install requests beautifulsoup4 pyyaml --quiet
+        echo "$VENV/bin" >> $GITHUB_PATH
+
+    - name: "[CRITICAL] No Direct API Trading Gate"
+      run: python3 tools/validate_no_direct_api_trading_v1.py
+
+    - name: "[CRITICAL] Validate KIS API Credentials (mock)"
+      env:
+        # Gitea repository variables are injected here; the Python loader reads these env names.
+        KIS_APP_Key_TEST: ${{ vars.KIS_APP_KEY_TEST }}
+        KIS_APP_Secret_TEST: ${{ vars.KIS_APP_SECRET_TEST }}
+      run: |
+        if [ -z "${KIS_APP_Key_TEST:-}" ]; then
+          echo "::error::Gitea variable KIS_APP_KEY_TEST is missing or empty"
+          exit 1
+        fi
+        if [ -z "${KIS_APP_Secret_TEST:-}" ]; then
+          echo "::error::Gitea variable KIS_APP_SECRET_TEST is missing or empty"
+          exit 1
+        fi
+        python3 tools/validate_kis_api_credentials_v1.py \
+          --account mock \
+          --ticker 005930 \
+          --dry-run
+
+  collect-kis-data-live:
+    if: github.event_name == 'schedule'
     runs-on: self-hosted
 
     steps: