feat(ci): Automate CI gate and smoke:live as release gate

[Gabrielgvl]

Summary

Implements automated CI gates for the Orbio OpenClaw plugin as specified in issue #8:

• Adds smoke-live.yml workflow for manual trigger of live environment validation
• Enhances ci.yml with artifact upload on failure for better troubleshooting
• Updates RELEASING.md with comprehensive documentation for CI gates and secrets

Changes

New Workflow: .github/workflows/smoke-live.yml

• Manual trigger workflow for live environment validation
• Validates required secrets before execution
• Runs pnpm smoke:live with configurable parameters
• Uploads logs as artifacts (30-day retention)
• Optional PR comment integration when linked to a PR run ID

Updated Workflow: .github/workflows/ci.yml

• Adds artifact upload on failure (coverage reports, dist files)
• 7-day retention for troubleshooting failed builds

Updated Documentation: RELEASING.md

• Complete GitHub Actions secrets configuration table
• CI gate documentation with execution details
• Smoke:live gate documentation with step-by-step instructions
• Updated release checklist to reflect automated gates

Acceptance Criteria (from #8)

✅ PR fails when pnpm verify fails (existing ci.yml gate)
✅ Smoke live executable by workflow with secure variables (new smoke-live.yml)
✅ Documentation updated in RELEASING.md

Quality Gates Passed

• ✅ pnpm verify (lint, typecheck, coverage, env:audit, build)
• ✅ 43 tests passed with 99.09% coverage
• ✅ Pre-commit hooks executed successfully

Next Steps

1. Configure required secrets in repository settings:
   • ORBIO_BASE_URL (required)
   • ORBIO_API_KEY (required)
   • Optional: ORBIO_WORKSPACE_ID, ORBIO_SMOKE_QUERY, ORBIO_SMOKE_LIMIT
2. Run Smoke Live Validation workflow before any release
3. Manual sandbox OpenClaw runtime test still required

Fixes #8

[github-actions]

Codex PR review

Result: ✅ non-blocking
Exit code: 0
Timed out: no
Blocking findings: P0 0 | P1 0
Other findings: P2 1 | P3 0
Parser status: ok
Parser fallback used: no
Admin override: none
Override source: none
Override SHA: n/a

Top findings

• • [P2] Don't let an optional PR-linking step fail the whole smoke run — /home/runner/work/orbio-openclaw/orbio-openclaw/repo/.github/workflows/smoke-live.yml:95-100

Workflow logs