Bound an OSS Patch With Pathspecs and CODEOWNERS

OSS 补丁被限制在预定义的路径白名单内，CI 门禁阻止超出范围的更改，强制执行所有权规则。