test: 补充单元测试覆盖率 29.9% → 36.6%

新建 18 个测试文件，追加 30 个已有测试文件，覆盖协议解析、
错误分类、CEL 表达式求值、YAML 反序列化、字节编码等纯函数。

plugins/services/postgresql_test.go

@@ -3,6 +3,7 @@
 package services
 
 import (
+	"errors"
 	"strings"
 	"testing"
 
@@ -30,3 +31,25 @@ func TestPostgreSQLVulnInfoTruncatesByRune(t *testing.T) {
 		t.Fatalf("postgresql truncation helper = %q", got)
 	}
 }
+
+func TestClassifyPostgreSQLErrorType(t *testing.T) {
+	tests := []struct {
+		name string
+		err  error
+		want ErrorType
+	}{
+		{"nil", nil, ErrorTypeUnknown},
+		{"password authentication failed", errors.New("password authentication failed"), ErrorTypeAuth},
+		{"pq role", errors.New("pq: role \"foo\" does not exist"), ErrorTypeAuth},
+		{"dial tcp", errors.New("dial tcp connection refused"), ErrorTypeNetwork},
+		{"eof", errors.New("eof"), ErrorTypeNetwork},
+		{"unknown", errors.New("random pg error"), ErrorTypeUnknown},
+	}
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := classifyPostgreSQLErrorType(tt.err); got != tt.want {
+				t.Errorf("classifyPostgreSQLErrorType() = %v, want %v", got, tt.want)
+			}
+		})
+	}
+}