docs(release): address CodeRabbit review (#971)

- RELEASE-MANUAL-SMOKE.md sign-off fence: add `text` language tag
  (markdownlint MD040).
- RELEASE-MANUAL-SMOKE.md Linux toast: rephrase duplicate "only" —
  "CI Linux sees only Xvfb; this surface verifies on a real desktop".
- TESTING-STRATEGY.md "Not driver-automatable" section: clarify that
  RELEASE-MANUAL-SMOKE.md is the source of truth and the bullets are
  examples, not the full list.
- RELEASE_POLICY.md step 5: spell out that the sign-off block is
  pasted verbatim with checked items intact.

Refs #971
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: oxoxDev

docs/RELEASE-MANUAL-SMOKE.md

@@ -39,7 +39,7 @@ Applies to every release, all platforms.
 ### Linux
 
 - [ ] **`.deb` and/or `.AppImage` install on a clean Ubuntu 22.04** — `sudo dpkg -i openhuman_*.deb` or `chmod +x openhuman-*.AppImage && ./openhuman-*.AppImage`. Expected: no missing-dependency errors; app launches.
-- [ ] **OS-native notification toasts fire** — Trigger a notification from inside the app (e.g. memory captured, agent finished). Expected: a libnotify-style toast appears outside the app window. (CI Linux only sees Xvfb — this surface only verifies on a real desktop.)
+- [ ] **OS-native notification toasts fire** — Trigger a notification from inside the app (e.g. memory captured, agent finished). Expected: a libnotify-style toast appears outside the app window. (CI Linux sees only Xvfb; this surface verifies on a real desktop.)
 
 ### Cross-platform
 
@@ -62,7 +62,7 @@ Applies to every release, all platforms.
 
 ## Sign-off
 
-```
+```text
 Release: vX.Y.Z
 Tester: @<github-handle>
 Date: YYYY-MM-DD

docs/RELEASE_POLICY.md

@@ -32,4 +32,4 @@ Implementation: `app/src/utils/oauthAppVersionGate.ts`, `app/src/utils/desktopDe
 2. When dropping support for older installs, set **`VITE_MINIMUM_SUPPORTED_APP_VERSION`** to the new floor **before** or **with** that release (repo Actions variables + both workflow steps above).
 3. Remove, redirect, or retire older stable installers and stale **updater** entries from user-facing surfaces (GitHub Release assets, website, CDN, updater feed). Confirm deprecated artifacts are not reachable from default install/update flows.
 4. Smoke-test **Gmail connect** on a fresh install from **releases/latest**.
-5. Complete the [manual smoke checklist](./RELEASE-MANUAL-SMOKE.md) and paste the sign-off block into the release PR description before tagging.
+5. Complete the [manual smoke checklist](./RELEASE-MANUAL-SMOKE.md), then paste the completed sign-off block (verbatim, with every checked item left checked) into the release PR description before tagging.

docs/TESTING-STRATEGY.md

@@ -120,14 +120,14 @@ bash app/scripts/e2e-run-spec.sh test/e2e/specs/<your-spec>.spec.ts <id>
 
 ## Not driver-automatable — manual smoke required
 
-Some surfaces cannot be driven by WDIO / Appium because they cross OS-level trust boundaries or hardware paths. These ship with a documented manual smoke checklist ([`docs/RELEASE-MANUAL-SMOKE.md`](./RELEASE-MANUAL-SMOKE.md)) and a sign-off on the release PR:
+Some surfaces cannot be driven by WDIO / Appium because they cross OS-level trust boundaries or hardware paths. The complete checklist + sign-off block lives in [`docs/RELEASE-MANUAL-SMOKE.md`](./RELEASE-MANUAL-SMOKE.md) — that file is the source of truth for what must be verified per release. Examples of what it covers:
 
 - macOS TCC permission prompts (Accessibility, Input Monitoring, Screen Recording, Microphone)
 - Gatekeeper signature validation on first launch
 - Code-sign integrity (`codesign --verify --deep --strict`)
 - DMG install / drag-to-Applications flow
 - Auto-update download + relaunch
-- OS-native notification toasts on Linux CI (no display server visible to the driver beyond Xvfb)
+- OS-native notification toasts on Linux (no display server visible to the driver beyond Xvfb)
 
 If a feature has no automated coverage AND is not on the manual smoke list, treat it as untested — open a coverage gap.