feat: Railiance package and deploy (HARNESS-WP-0001-T06)

Container image, k8s namespace/deployment/smoke job, host venv install path,
and deterministic agent-harness smoke (sandbox commit+push+hub) for remote
verification without Claude Code on the worker host.

deploy/scripts/railiance-smoke.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# Host-level Railiance smoke for agent-harness (HARNESS-WP-0001-T06).
+# Run on railiance01 after install. Uses deploy key + AppRole env + hub :18000.
+set -euo pipefail
+
+ROOT="${AGENT_HARNESS_ROOT:-$HOME/agent-harness}"
+# shellcheck disable=SC1090
+source "${HOME}/.local/agent-harness/env"
+export STATE_HUB_URL="${STATE_HUB_URL:-http://127.0.0.1:18000}"
+export PATH="${HOME}/.local/bin:${PATH}"
+export PYTHONPATH="${ROOT}:${HOME}/llm-connect${PYTHONPATH:+:$PYTHONPATH}"
+
+cd "$ROOT"
+if ! command -v agent-harness >/dev/null 2>&1; then
+  python3 -m pip install --user -e . -q
+fi
+
+echo "STATE_HUB_URL=$STATE_HUB_URL"
+curl -sS -m 5 "$STATE_HUB_URL/state/health" || curl -sS -m 5 "${STATE_HUB_URL%/}/" || true
+echo
+
+agent-harness smoke \
+  --work-dir "${HOME}/work/executor-sandbox" \
+  --remote "ssh://git@forgejo-agent-harness/coulomb/executor-sandbox.git"