feat(qa): #1827 slice 4 — optional CI workflow_dispatch / path-filtered QA job #1930

Parent

Part of #1827 — unattended agent QA mode (H2 Docker + Playwright surface gate).

Depends on: slices 1–2 (stack + Playwright golden path); slice 3 optional but preferred for agent_safe integration docs.

Slice 4 of 4 — optional CI job only. Keep scope to workflow wiring + docs; do not re-build the Docker/Playwright product surface here.

Summary

Add an optional CI path: workflow_dispatch and/or path-filtered optional check that can bring up (or assume) the H2 Docker QA stack and run the golden / surface-filtered Playwright path for agent-friendly verification. Must remain non-blocking for unrelated PRs unless product owners later promote it.

Modules / paths (hint)

• .github/workflows/
• modules/perc-qa-automation
• Docs note in docs/developer-module/workbench-rest-and-qa-modes.md

Acceptance criteria (from parent #1827, this slice)

• Optional CI job via workflow_dispatch and/or path-filtered optional check (not a silent required gate for the whole monorepo unless intentionally designed).
• Job uses the productized H2 Docker QA path + Playwright env (TEST_CMS_URL only for CMS target) — no host install path.
• Can run golden smoke (slice 2) and/or surface-filtered subset (slice 3) as documented.
• Failure artifacts (screenshots/traces/logs) uploaded as workflow artifacts.
• Documented how agents/operators trigger the job and how results attach to PRs/issues.
• No secrets in workflow YAML beyond approved GitHub Actions secrets patterns; no committed passwords.
• Cross-platform / runner assumptions documented (Linux GHA runners OK; note Windows local parity is still required for scripts from earlier slices).

Out of scope (other slices)

• Entrypoint + health + tear-down implementation → slice 1
• Playwright wiring + golden smoke → slice 2
• AGENTS / night-issue surface filter rules → slice 3

Non-goals (parent)

• Full multi-RDBMS matrix CI
• Making full Playwright suite required on every PR
• Replacing human dev mode

Operator notes

Label PRs with operator:* + model:*. Prefer optional/manual first; promote required checks only with explicit product decision.