Testnet end-to-end test suite #39

Description

Scripted e2e on HL testnet: init with external wallet approvals (or a disposable CI-only test signer), fund (mocked Relay), run, order/cancel/modify, events, rotate, revoke.

Acceptance criteria

• Runs in CI nightly with secrets
• Covers full lifecycle
• Artifacts: events + audit logs
• Run a coding agent using the installed/hosted skill through the dedicated testnet flow; record agent/session ID, commit, lifecycle report and event/audit artifacts (moved from SKILL.md for Claude Code / Codex #37)

Agent skill validation (from #37)

The live coding-agent session remains unverified. It is separate from the
deterministic CI harness and offline fixture tests. #37 covers the completed
skill deliverable; this issue owns both forms of live testnet evidence.

Implementation

Implementation PR: #56

The harness supports a caller-controlled external signer over JSON stdin/stdout;
the user's master key never enters the CLI or harness. The dedicated CI signer
is a separate test-only mode. See setup and protocol.

Fifteen stages reconcile both approvals, settlement, runner readiness, exact
exchange prices, correlated open/canceled events and replay, post-rotation
trading, final revocation and audit integrity. Cleanup tracks both run-owned
agents before approvals and verifies no remaining orders, agents or positions.
Schema 2 reports and CI summaries reject incomplete evidence and preserve the
separate, unverified coding-agent session requirement.

Live acceptance is pending a configured QA wallet and Privy app; offline tests
do not check these acceptance boxes.

Dependencies

• Runner command interface (per ADR) and client routing #27
• JSON-line event stream and events command #29
• rotate command: new agent key with zero-downtime handoff #33
• revoke command #34
• Audit trail: intent → decision → signature → fill #35
• SKILL.md for Claude Code / Codex #37

Size

L