feat(qa): #1827 slice 3 — Playwright surface filter + agent rules for QA mode #1929

Parent

Part of #1827 — unattended agent QA mode (H2 Docker + Playwright surface gate).

Depends on: slice 1 (stack) + slice 2 (Playwright env + golden smoke) ideally merged or available.

Slice 3 of 4 — surface filtering + agent instruction updates so unattended agent_safe work can use QA mode instead of blanket-skipping Playwright.

Summary

Document and implement a subset run of Playwright specs for the PR surface under test (by path / grep / tag). Update root and module AGENTS.md and night-issue workflow so unattended UI work can use the H2 Docker QA path instead of treating live Playwright as permanently agent-unsafe.

Modules / paths (hint)

• modules/perc-qa-automation (+ AGENTS.md)
• Root AGENTS.md / related agent workflow docs
• Night-issue / agent_safe workflow (e.g. .grok/workflows/, .kilocode/ as applicable)
• docs/developer-module/workbench-rest-and-qa-modes.md

Acceptance criteria (from parent #1827, this slice)

• Surface filtering: documented way to run a subset of specs (by path/grep/tag) for the PR surface under test.
• Agent instructions updated: root/module AGENTS.md and/or night-issue workflow so unattended UI work can use this path instead of blanket-skipping Playwright.
• Instructions reference slices 1–2 entrypoint + TEST_CMS_URL + golden smoke as the proof path.
• Docs note failure artifact locations and how to attach to PRs/issues (if not already done in slice 2).
• HARD GATE — human review of agent rules: do not commit AGENTS.md / workflow rule files until the human has explicitly reviewed and approved those rule diffs (see root AGENTS.md). Draft in working tree / PR as needed; call out rule diffs in the PR body.
• No secrets committed.

Out of scope (other slices)

• H2 Docker entrypoint/health/tear-down → slice 1
• Golden Playwright smoke + env defaults → slice 2
• Optional CI workflow_dispatch / path-filtered job → slice 4

Non-goals (parent)

• Full multi-RDBMS matrix
• Replacing human dev mode
• Enabling every historical Playwright skip overnight without a surface filter

Operator notes

Label PRs with operator:* + model:*. Rule-file commits require human approval before merge.