- Add bats to CI unit job; skip image push on PRs (fork-safe)
- Remove internal/profile package (dead code, replaced by provider system)
- Add launch and gateway validate test coverage
- Move bats install out of integration jobs; use kind install_only
- Tighten Makefile, dev-harness.sh, and test scripts

- Add `go build -o harness .` before `bats test/preflight.bats` in CI:
  bats tests use `$REPO_ROOT/harness` which must exist.
- Add "Wait for gateway" step to kind job (mirrors local job): removing
  the `test` Makefile prerequisite from `test-kind` eliminated the
  ~2min grace period the bats run accidentally provided, causing
  `harness up` to hit a not-yet-ready local openshell service.

The podman save + kind load image-archive step takes 60-90s and can
make the local openshell service unresponsive by the time test-flow.sh
runs. Poll for up to 60s immediately before handing off to tests.

The podman save + kind load image-archive step takes ~70s and leaves the
local openshell service unresponsive. Restart it via systemctl before
running test-flow.sh, which uses `harness up` (no --remote) and depends
on the local gateway being reachable.

The podman save + kind load archive transfer takes ~70s and starves the
local openshell service, making it unresponsive for subsequent tests.
Run a background keep-alive loop that pings the gateway every 5s during
the transfer instead of restarting after the fact.

The openshell daemon briefly reloads its config after `openshell gateway
add` runs during `deploy kind`, making it transiently unresponsive.
Retry InferenceGet up to 5 times with 3s intervals so harness up can
proceed once the daemon finishes reloading.

images.yml: push sandbox/runner images on same-repo PRs (not fork PRs),
so the integration kind job can pull the image from the registry.

kind-lifecycle.sh: skip the 60-90s podman save+load preload in CI
(CI=true). The preload disrupted the local openshell service; in CI the
image is now available in the registry. Local dev still preloads from the
container daemon for fast iteration without a registry push.