ci(scripts): migrate post-merge runtime deps to scripts/ci/ + skip-release marker [skip release]

[0xElCapitan]

Summary

Resolves forge-1bo. Moves the post-merge non-cycle runtime dependencies from the untracked .claude/scripts/ path (gitignored as of commit 931d4c89 "chore(loa): update framework to v1.157.0, untrack bulk .claude/") into the tracked, repo-owned scripts/ci/ path. Adds release-skip marker support so chore/CI repair PRs can opt out of automatic semver tagging.

This PR carries [skip release] in commit 761c0a63 body and [no-bump] in commit 7b161ec4 body — when merged, the now-fixed post-merge workflow will detect the markers and skip software tag creation. No accidental v0.2.5 / v0.3.1 tag will be produced by this PR's merge (verified by local dry-run).

Scope (bounded, deliberate)

Path migrated	Why
scripts/ci/classify-merge-pr.sh (147 lines)	workflow classify job
scripts/ci/classify-pr-type.sh (89 lines)	hard-required transitive of classify-merge-pr.sh
scripts/ci/semver-bump.sh (~430 lines, patched)	workflow simple-release job; also gained [skip release] / [skip ci-release] / [no-bump] marker support
scripts/ci/bootstrap.sh (99 lines)	required transitive of semver-bump.sh; uses git rev-parse --show-toplevel for PROJECT_ROOT (CI-safe)

Cycle-PR shell-only fallback path (which depends on post-merge-orchestrator.sh + transitive deps release-notes-gen.sh, ground-truth-gen.sh, classify-commit-zone.sh, lore-promote.sh, path-lib.sh — 3500+ lines total) was DEFERRED at the dependency-graph STOP checkpoint (operator decision 2026-05-27). A KNOWN LIMITATION comment block in post-merge.yml's "Shell-only fallback" step explicitly documents this. The Claude Code Action path (cycle PRs with secrets.ANTHROPIC_API_KEY) is unaffected.

Release-skip marker support

Added to scripts/ci/semver-bump.sh (post-migration patch, lines 287-318). The check runs after the commit-count gate and BEFORE the heavy parse_commits loop. Recognized markers in commit subject or body (anywhere between latest semver tag and HEAD):

• [skip release] — generic opt-out
• [skip ci-release] — explicit CI-repair opt-out
• [no-bump] — alternative form

When found, semver-bump.sh emits {} (empty JSON) and exits 0. The workflow's Compute semver step parses .next from the JSON; empty .next sets steps.semver.outputs.skip=true, which gates the "Create tag" step's if: condition.

Implementation note: process substitution (< <(...)) is used instead of a pipeline because the script runs under set -euo pipefail — a git log | grep -q pipeline would have grep -q exit immediately on match, killing git log with SIGPIPE, which pipefail would propagate, making the if evaluate FALSE even on a successful match. Process substitution sidesteps this entirely.

Tag-risk analysis (per operator's release safety requirement)

Verified locally on this branch:

$ PROJECT_ROOT=$(pwd) bash scripts/ci/semver-bump.sh
[semver-bump] skip-release marker found in commits between v0.2.4 and HEAD — emitting empty JSON to suppress tag
{}
EXIT=0

No tag will be created on this PR's merge.

What is NOT changed

• No edit to .gitignore.
• No re-tracking of .claude/ (git diff master -- .claude/ is empty).
• No git submodule installation.
• No tag created manually.
• No product/runtime code touched (no edits to src/, bin/, spec/, fixtures/, test/).
• No package.json / package-lock.json mutation.
• No IR / receipt / canonicalization / forge-verify behavior changed.
• FORGE software/package version unchanged at 0.3.0.

Test plan

• bash -n scripts/ci/*.sh — 4/4 OK
• Local npm run test:unit → 777 / 777 pass · 0 fail
• Local npm run test:all → 792 / 792 pass · 0 fail
• Dry-run scripts/ci/semver-bump.sh on this branch → emits {} (no tag)
• Dry-run scripts/ci/classify-merge-pr.sh --merge-msg "ci(scripts): ... [skip release]" → pr_type=other
• PR CI workflow auto-fires on this PR → verification
• After merge: post-merge workflow runs all jobs to success with NO new tag created → end-to-end verification of forge-1bo resolution

Commits

7b161ec4  chore(beads): record forge-1bo follow-up task
761c0a63  ci(scripts): migrate post-merge runtime deps to scripts/ci/ + skip-release marker

🤖 Generated with Claude Code