优化结构

internal/config/runtime.go

@@ -270,6 +270,9 @@ func (r *Store) watchLoop(watcher *fsnotify.Watcher, stop <-chan struct{}, done
 				// take down a running process or publish invalid state.
 				continue
 			}
+			// File watching publishes the merged immutable snapshot only. Storage
+			// clients are rebuilt by the explicit system reload flow in data;
+			// keeping that lifecycle out of the watcher preserves rollback safety.
 			r.Replace(MergeRuntimeConfig(r.Snapshot(), next))
 		case _, ok := <-errors:
 			// fsnotify errors are intentionally non-fatal; the watcher remains