fix(energy): checkpoint validated drill pagination and read-only preview

Co-authored-by: HiFox Agent <agents-noreply@hifox.com>

src/server/routes/energy/routes.test.ts

@@ -246,13 +246,16 @@ test("氢能 BI v2 利润下钻只保留客户承担订单，并与对客总价
   } as unknown as HydrogenBiV2Dependencies);
 
   const response = await v2App.request(
-    "/h2/v2/drill?year=2026&vehicleScope=all&verifyScope=all&groupBy=station&amountScope=customer",
+    "/h2/v2/drill?year=2026&vehicleScope=all&verifyScope=all&groupBy=station&amountScope=customer&pageSize=1&page=2",
   );
   assert.equal(response.status, 200);
   const payload = await response.json();
   assert.equal(payload.amountScope, "customer");
+  assert.equal(payload.page.hasMore, true);
+  assert.deepEqual((calls[1].params as unknown[]).slice(-2), [1, 1]);
   assert.equal(payload.summary.revenue - payload.summary.cost, 60);
   assert.equal(calls.length, 2);
+  assert.match(calls[1].sql, /ORDER BY kg DESC, id ASC, name ASC LIMIT \? OFFSET \?/);
   for (const call of calls) {
     assert.match(
       call.sql,