[codex] 精简 static gate 静态门禁

[iamsyc]

Summary

• Trim scripts/ci/static.sh from 528 lines to 303 lines.
• Remove duplicated release workflow topology assertions, WebRTC overlay detail scans, and create_dmg fixture behavior from the static gate.
• Update the WebRTC overlay note to point validation at Package.swift, SHA256SUMS, SwiftPM, and Xcode builds.

Validation

• bash -n scripts/ci/static.sh scripts/ci/test_classify.sh scripts/ci/classify.sh scripts/dev/bootstrap.sh scripts/release/.sh scripts/lib/.sh
• shfmt -d scripts/ci/static.sh scripts/ci/test_classify.sh scripts/ci/classify.sh scripts/dev/bootstrap.sh scripts/release/.sh scripts/lib/.sh
• shellcheck -x -e SC2016 scripts/ci/static.sh scripts/ci/test_classify.sh scripts/ci/classify.sh scripts/dev/bootstrap.sh scripts/release/.sh scripts/lib/.sh
• ROOT_DIR=/Users/syc/Project/VoidDisplay TOOL_ROOT=/Users/syc/Project/VoidDisplay scripts/ci/test_classify.sh
• ROOT_DIR=/Users/syc/Project/VoidDisplay TOOL_ROOT=/Users/syc/Project/VoidDisplay scripts/ci/static.sh
• git diff --check
• ROOT_DIR=/Users/syc/Project/VoidDisplay TOOL_ROOT=/Users/syc/Project/VoidDisplay scripts/ci/xcode.sh --action build --configuration Debug --out-dir .ai-tmp/static-gate-trim-xcode-build

[github-actions]

CI Summary

Run: Open

Check	Status	Details
Change Scope	code	code=true ui=false script=true product=false test=false ci=true release=false dependency=false tooling=false docs_only=false unknown=false
Required Gates	derived	static=true dependency=false unit=false xcode=false ui=false release=false
Dependency Review	skipped	required=false high and critical vulnerabilities block
Static Checks	success	required=true actionlint, shellcheck, shfmt, SwiftFormat, SwiftLint, action pinning
Unit Tests	skipped	required=false Swift tests: n/a Go packages: n/a Reason: n/a Artifact: n/a
Xcode Build	skipped	required=false Debug build with zero warning scan Artifact: xcode-build
UI Smoke	skipped	required=false Failure classification is written by ui-smoke-summary.json in each artifact. Artifacts: ui-smoke-baseline, ui-smoke-permissionDenied, ui-smoke-rebuildFailed
Release Smoke	skipped	required=false arm64=skipped intel64=skipped PR release smoke requires arm64 only. Artifacts: release-smoke-arm64 Release verify summaries are produced by release.yml before publishing.
Artifacts	link	Open artifacts
CI Gate	success	single branch protection check