feat: runtime smoke test, gitea actions workflows, runtime-checks record

.gitea/workflows/smoke.yml

@@ -0,0 +1,23 @@
+name: smoke
+
+# Runtime smoke against a real opencode v2 server: plugin loads, skills register with correct
+# autoinvoke flags, agents decode with permissions. No model calls, no tokens. Manual trigger only:
+# it installs OpenCode via the official installer and is not required for publishing.
+on:
+  workflow_dispatch:
+
+jobs:
+  smoke:
+    if: gitea.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+      - run: npm ci
+      - run: npm run build
+      - name: Install OpenCode
+        run: curl -fsSL https://opencode.ai/install | bash
+      - name: Run smoke
+        run: node scripts/smoke.ts