ci: use GitHub-hosted runners for the public CLI

.github/workflows/ci-hosted.yml

@@ -0,0 +1,32 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    name: Verify Node ${{ matrix.node-version }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        node-version:
+          - 22
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: npm
+      - run: npm ci
+      - run: npm run verify
+      - run: node --test scripts/release-evidence.test.mjs

internal/agent-sessions/ci1-cli-20261019.md

@@ -49,3 +49,14 @@ fingerprint-named Incus alias pointing to itself. The provider rejects remote
 names and retargeted aliases. The new operator receipt documents that authority;
 the guest's manifest is a content/age check rather than image attestation.
 No pool, image, host limit, product secret, deployment or runtime changed.
+
+## Public repository policy
+
+On 2026-10-19 the owner confirmed that CLI and SDK repositories are public and
+made polymorfa/cli public. Live API readback confirmed CLI and SDK visibility.
+The CLI CI destination is therefore standard GitHub-hosted Ubuntu for both
+pull requests and main pushes. The ci-1 image pin, admission helper and
+controller receipt were removed from the active source. The full Node 22
+verification and release-evidence commands are preserved, with a read-only
+job token and no persisted checkout credentials. This section supersedes the
+private-repository CI routing described above; prior results remain historical.

internal/docs/ci-hosted.md

@@ -0,0 +1,24 @@
+# Public CLI CI
+
+The owner made polymorfa/cli public on 2026-10-19. CLI and SDK repositories use
+standard GitHub-hosted runners. They are excluded from ci-1, whose runner group
+has public-repository access disabled.
+
+`.github/workflows/ci-hosted.yml` preserves the CI display name, Verify Node 22
+check and all existing source commands: `npm ci`, `npm run verify`, and the three
+release-evidence tests. It runs on pull requests, including forks, and main
+pushes using `ubuntu-latest`, read-only repository contents, no persisted
+checkout credentials, npm caching and a 20-minute deadline. The workflow uses
+`pull_request`, not a privileged target event, and declares no secrets.
+
+No ci-1 manifest, image pin, private tool cache or self-hosted runner is required.
+New workflow identity allows source qualification without enabling an old
+Blacksmith workflow. Existing source checks, production audit, build and package
+dry-run are preserved. Actual GitHub qualification and the first main push
+remain required before calling this cutover verified.
+
+CLI commands, SDK dependency, API contracts, package and lockfile, public product
+docs/changelog, product flags and Admin controls are unaffected: this changes
+only CI routing. The publication workflow is unchanged, schedule/manual only,
+and retains matching SDK/API acceptance. No package publication or product
+deployment is invoked. Staging and regional rename #744 remain held.