fix(deploy): unify backend URL policy

scripts/test-backend-url-policy.sh

@@ -0,0 +1,23 @@
+#!/bin/sh
+set -eu
+
+cd "$(dirname "$0")/.."
+
+policy=frontend/src/api/backend-url-policy.json
+corpus=frontend/src/api/backend-url-cases.json
+
+jq -c '.[]' "$corpus" | while IFS= read -r case_json; do
+  value=$(printf '%s' "$case_json" | jq -r '.value')
+  valid=$(printf '%s' "$case_json" | jq -r '.valid')
+  if BACKEND_URL_POLICY_FILE="$policy" ./docker/validate-backend-url.sh "$value"; then
+    actual=true
+  else
+    actual=false
+  fi
+  if [ "$actual" != "$valid" ]; then
+    echo "shell policy mismatch for BACKEND_BASE_URL=$value: expected $valid" >&2
+    exit 1
+  fi
+done
+
+echo "shell canonical URL corpus: ok"

scripts/verify-container-images.sh

@@ -22,6 +22,7 @@ docker run --rm --platform "$platform" -e BACKEND_BASE_URL=/api \
   "$frontend_image" frontend-config-smoke
 docker run --rm --platform "$platform" -e BACKEND_BASE_URL= \
   "$frontend_image" frontend-config-smoke
+docker run --rm --platform "$platform" --entrypoint frontend-policy-smoke "$frontend_image"
 
 if docker run --rm --platform "$platform" -e BACKEND_BASE_URL=/backend \
     "$frontend_image" frontend-config-smoke >/dev/null 2>&1; then