Fix thread safety, implement prompt, fix resource leaks, add history rotation

- Add threading.Lock around asr_pipeline calls (thread-safe inference on shared GPU)
- Implement prompt parameter: propagate through process_file → transcribe → generate_kwargs
- Fix prompt_ids device mismatch (.to(self.device) for CUDA)
- Replace mkdtemp() with create_temp_file() in sources.py (no more leaked /tmp dirs)
- Add max_history_days (default 30) with automatic cleanup of old history directories
- Add intentional comments for SSRF and /config decisions (internal service)
- Lower normalize_audio log level from INFO to DEBUG

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/history.py

@@ -4,6 +4,7 @@
 
 import os
 import json
+import shutil
 import datetime
 import random
 import string
@@ -34,7 +35,7 @@ def save_history(result: Dict[str, Any], original_filename: str, config: Dict) -
     try:
         os.makedirs(_history_root, exist_ok=True)
 
-        now = datetime.datetime.now()
+        now = datetime.datetime.now(tz=datetime.timezone.utc)
         date_str = now.strftime("%Y-%m-%d")
         timestamp_ms = int(now.timestamp() * 1000)
         random_tag = ''.join(random.choices(string.ascii_lowercase + string.digits, k=4))
@@ -48,9 +49,37 @@ def save_history(result: Dict[str, Any], original_filename: str, config: Dict) -
         with open(history_path, 'w', encoding='utf-8') as f:
             json.dump(result, f, ensure_ascii=False, indent=2)
 
-        logger.info(f"Результат сохранён в историю: {history_path}")
+        logger.info("Результат сохранён в историю: %s", history_path)
+        _cleanup_old_history(config)
         return history_path
 
     except Exception as e:
-        logger.error(f"Ошибка при сохранении истории: {e}")
+        logger.error("Ошибка при сохранении истории: %s", e)
         return None
+
+
+def _cleanup_old_history(config: Dict) -> None:
+    """
+    Удаляет директории истории старше max_history_days дней.
+
+    Args:
+        config: Конфигурация (проверяется max_history_days).
+    """
+    max_days = config.get("max_history_days", 30)
+    if max_days <= 0:
+        return
+
+    cutoff = datetime.datetime.now(tz=datetime.timezone.utc) - datetime.timedelta(days=max_days)
+    cutoff_str = cutoff.strftime("%Y-%m-%d")
+
+    try:
+        for entry in os.listdir(_history_root):
+            entry_path = os.path.join(_history_root, entry)
+            if not os.path.isdir(entry_path):
+                continue
+            # Директории имеют формат YYYY-MM-DD
+            if len(entry) == 10 and entry < cutoff_str:
+                shutil.rmtree(entry_path, ignore_errors=True)
+                logger.info("Удалена старая директория истории: %s", entry)
+    except Exception as e:
+        logger.warning("Ошибка при очистке старой истории: %s", e)