test(e2e): run conformance in gateway lanes

[elezar]

Summary

Run the standalone OpenShell conformance suite in every gateway-backed e2e lane, using a conformance CLI artifact built once for CI and supplied alongside the prebuilt OpenShell CLI. This replaces the removed Rust smoke coverage with gateway-agnostic conformance checks for Docker, Podman, Kubernetes, and VM gateways.

Related Issue

• spike: driver conformance suite for compute drivers #2183
• Supersedes test(e2e): add CLI conformance baseline #2871, which is closed unmerged now that this PR carries the full stack against main.

Changes

• Added the reusable openshell-conformance scenario and runner library.
• Added the distributable openshell-conformance CLI with list, run, JSON output, default-all scenario execution, and optional explicit scenario selection for direct CLI use.
• Moved the previous portable smoke coverage out of the Rust e2e crate and into the standalone conformance library.
• Added a shared e2e helper that requires OPENSHELL_BIN and OPENSHELL_CONFORMANCE_BIN instead of building binaries implicitly from test wrappers.
• Updated Docker, Podman, Kubernetes, and VM e2e wrappers to run conformance against the instantiated gateway before any lane-specific Rust tests.
• Updated mise tasks so local gateway e2e tasks build the conformance CLI once through a hidden dependency, while CI keeps --skip-deps and fails loudly if the prebuilt conformance binary is missing.
• Added CI build/download wiring for the conformance artifact alongside the existing e2e CLI artifact.
• Documented standalone conformance CLI usage.

Testing

• cargo test -p openshell-conformance -p openshell-conformance-cli
• bash -n on the e2e wrapper scripts and shared conformance helper
• mise tasks --json
• mise run --dry-run e2e
• mise run pre-commit
• Confirmed successful CI rust-docker and rust-vm-managed lanes downloaded OPENSHELL_CONFORMANCE_BIN and printed the conformance run banner before executing the smoke scenario.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Documentation updated

[github-actions]

Label test:e2e applied for 6e7c13b. Open the existing run and click Re-run all jobs to execute with the label set. The run will execute the standard E2E suite after building the required gateway and supervisor images once. The matching required CI gate status on this PR will flip green automatically once the run finishes.

[elezar]

/ok-to-test 6e7c13b

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[elezar]

/ok-to-test 2a2e632