fix: substring 越界防护 + Redis key 解析修正

- VehicleSyncTask: 改用前缀精确切割解析 Redis key，避免 split 对含下划线 ID 的误解析
- VehicleSyncTask/MqttChargeStationConsumer/MqttDynamicConsumer: substring(0, 2) 增加长度校验

iot-platform/src/main/java/com/iot/platform/mqtt/MqttChargeStationConsumer.java

@@ -70,7 +70,8 @@ public class MqttChargeStationConsumer extends AbstractDynamicMqttConsumer {
         }
 
         String dbName = topicParts[1];
-        String dbNamePrefix = "pe_iot_"+dbName.substring(0, 2);
+        String dbPrefix = dbName.length() >= 2 ? dbName.substring(0, 2) : dbName;
+        String dbNamePrefix = "pe_iot_" + dbPrefix;
         //先传输为deviceid，到后面进行优化
         String superTable = topicParts[3];
 //        String tableName = superTable + "_" + date.getYear() + String.format("%02d", date.getMonthValue());

iot-platform/src/main/java/com/iot/platform/mqtt/MqttDynamicConsumer.java

@@ -105,7 +105,8 @@ public class MqttDynamicConsumer extends AbstractDynamicMqttConsumer {
         data.put("device_id", ctx.deviceId);
         List<Map<String, Object>> batch = Collections.singletonList(data);
 
-        String dbNamePrefix = "pe_iot_"+ctx.controllerId.substring(0, 2);
+        String controllerPrefix = ctx.controllerId.length() >= 2 ? ctx.controllerId.substring(0, 2) : ctx.controllerId;
+        String dbNamePrefix = "pe_iot_" + controllerPrefix;
         String controllerId = ctx.controllerId;
         tdengineService.insertBatch(dbNamePrefix, ctx.deviceId, controllerId, batch);
     }

iot-platform/src/main/java/com/iot/platform/task/VehicleSyncTask.java

@@ -77,15 +77,21 @@ public class VehicleSyncTask {
                 }
 
                 // redisKey 格式: pe_iot_<controllerId>_<deviceId>
-                // 从右往左取，避免 id 本身含下划线的问题
-                String[] parts = redisKey.split("_");
-                if (parts.length < 3) {
+                String prefix = "pe_iot_";
+                if (!redisKey.startsWith(prefix) || redisKey.length() <= prefix.length()) {
                     log.warn("跳过非法 redis key: {}", redisKey);
                     continue;
                 }
-                String controllerId = parts[parts.length - 2];
-                String deviceId = parts[parts.length - 1];
-                String tableName = "pe_iot_" + controllerId.substring(0, 2);
+                String remainder = redisKey.substring(prefix.length());
+                int lastUnderscore = remainder.lastIndexOf('_');
+                if (lastUnderscore <= 0 || lastUnderscore == remainder.length() - 1) {
+                    log.warn("跳过非法 redis key: {}", redisKey);
+                    continue;
+                }
+                String controllerId = remainder.substring(0, lastUnderscore);
+                String deviceId = remainder.substring(lastUnderscore + 1);
+                String dbPrefix = controllerId.length() >= 2 ? controllerId.substring(0, 2) : controllerId;
+                String tableName = "pe_iot_" + dbPrefix;
 
                 try {
                     sysrealtimeService.createRealtime(tableName);