fix(release-gate): skip duplicate CI work and stop live LLM blowups

Shared paths like db.mjs were pulling PAGE/DATA live agent suites into every
hotfix. Keep those cases for actual page-data changes, resume passed suites on
the same artifact, and fail fast on Docker/port issues instead of rerunning 100+
scenarios.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/release-portal-canary-prod.sh

@@ -116,15 +116,19 @@ fi
 ALLOW_MAIN_RELEASE=1 bash "${ROOT}/scripts/check-release-ready.sh" --skip-fetch
 
 say "Run release source guards"
-(
-  cd "${ROOT}"
-  npm test -- --test-name-pattern='publish|space|billing' >/dev/null
-  npm run verify:mindspace-publish-guards >/dev/null
-  npm run verify:mindspace-page-sync-guards >/dev/null
-  npm run verify:h5-session-patches >/dev/null
-  npm run verify:page-data >/dev/null
-  npm run check:mindspace-public-links >/dev/null
-)
+if node "${ROOT}/scripts/resolve-release-ci-status.mjs" --commit "${FULL_SHA}"; then
+  say "Gitea CI already succeeded for ${FULL_SHA}; skipping duplicate local npm test/verify"
+else
+  (
+    cd "${ROOT}"
+    npm test -- --test-name-pattern='publish|space|billing' >/dev/null
+    npm run verify:mindspace-publish-guards >/dev/null
+    npm run verify:mindspace-page-sync-guards >/dev/null
+    npm run verify:h5-session-patches >/dev/null
+    npm run verify:page-data >/dev/null
+    npm run check:mindspace-public-links >/dev/null
+  )
+fi
 
 required_runtime_paths=(
   server.mjs

scripts/release-portal-runtime-prod.sh

@@ -153,13 +153,17 @@ say "本地预检查"
 check_release_scope
 
 if [[ "${SKIP_TESTS}" -ne 1 ]]; then
-  say "运行最小验证"
-  (
-    cd "${ROOT}"
-    npm test -- --test-name-pattern='publish|space|billing' >/dev/null
-    npm run verify:mindspace-publish-guards >/dev/null
-    npm run verify:page-data >/dev/null
-  )
+  if node "${ROOT}/scripts/resolve-release-ci-status.mjs" --commit "$(git -C "${ROOT}" rev-parse HEAD)"; then
+    say "Gitea CI already succeeded; skipping duplicate local npm test/verify"
+  else
+    say "运行最小验证"
+    (
+      cd "${ROOT}"
+      npm test -- --test-name-pattern='publish|space|billing' >/dev/null
+      npm run verify:mindspace-publish-guards >/dev/null
+      npm run verify:page-data >/dev/null
+    )
+  fi
 fi
 
 if [[ "${SKIP_BUILD}" -ne 1 ]]; then

scripts/run-release-gate-runtime-container.mjs

@@ -3,10 +3,12 @@ import { spawn } from 'node:child_process';
 import path from 'node:path';
 
 import { assertPortalRuntimePath, inspectPortalRuntime } from '../release-gate/artifact.mjs';
+import { assertDockerDaemonAvailable } from '../release-gate/preflight.mjs';
 
 const root = path.resolve(new URL('..', import.meta.url).pathname);
 const runtime = assertPortalRuntimePath(path.join(root, '.runtime', 'portal'), { repoRoot: root });
 const image = process.env.RELEASE_GATE_NODE_IMAGE || 'node:24-bookworm';
+assertDockerDaemonAvailable();
 
 async function runDocker(commandArgs, { input = '' } = {}) {
   return new Promise((resolve, reject) => {