[codex] 精简 CI 分类与发布脚本

[iamsyc]

Summary

• 数据化 classify 路径分类规则，保留现有 CI output 与 summary 语义
• 收敛 PR CI trusted script 模型与 release gate 执行路径
• 提取 release 公共函数，删除未调用的 require_ci_gate.sh

Validation

• bash -n scripts/lib/release.sh scripts/release/*.sh scripts/ci/static.sh scripts/ci/classify.sh scripts/ci/test_classify.sh
• shellcheck -x -e SC2016 scripts/ci/static.sh scripts/lib/release.sh scripts/release/*.sh
• shfmt -d scripts/ci/static.sh scripts/lib/release.sh scripts/release/*.sh scripts/ci/classify.sh scripts/ci/test_classify.sh
• git diff --check
• ROOT_DIR=/Users/syc/Project/VoidDisplay TOOL_ROOT=/Users/syc/Project/VoidDisplay scripts/ci/test_classify.sh
• ROOT_DIR=/Users/syc/Project/VoidDisplay TOOL_ROOT=/Users/syc/Project/VoidDisplay scripts/ci/static.sh
• ROOT_DIR=/Users/syc/Project/VoidDisplay TOOL_ROOT=/Users/syc/Project/VoidDisplay scripts/ci/xcode.sh --action build --configuration Debug --out-dir .ai-tmp/static-final-xcode-build

Notes

• Draft PR because workflow behavior must be verified in GitHub Actions.

[github-actions]

CI Summary

Run: Open

Check	Status	Details
Change Scope	code	code=true ui=false script=true product=false test=false ci=true release=true dependency=false tooling=false docs_only=false unknown=false
Required Gates	derived	static=true dependency=false unit=false xcode=false ui=false release=true
Dependency Review	skipped	required=false high and critical vulnerabilities block
Static Checks	success	required=true actionlint, shellcheck, shfmt, SwiftFormat, SwiftLint, action pinning
Unit Tests	skipped	required=false Swift tests: n/a Go packages: n/a Reason: n/a Artifact: n/a
Xcode Build	skipped	required=false Debug build with zero warning scan Artifact: xcode-build
UI Smoke	skipped	required=false Failure classification is written by ui-smoke-summary.json in each artifact. Artifacts: ui-smoke-baseline, ui-smoke-permissionDenied, ui-smoke-rebuildFailed
Release Smoke	success	required=true arm64=success intel64=skipped PR release smoke requires arm64 only. Artifacts: release-smoke-arm64 Release verify summaries are produced by release.yml before publishing.
Artifacts	link	Open artifacts
CI Gate	success	single branch protection check