v0.7.1 Surface Runner Framework

sw.testing SDK module — structured test framework for surface runners:
- suite/test registration, lifecycle hooks (beforeAll/afterAll/beforeEach/afterEach)
- Assertion library (ok/eq/neq/gt/match/throws/status/shape/arrayOf)
- Auto-cleanup via track(type, id) with LIFO deletion
- Three result statuses: passed/failed/warned
- Structured JSON results with timing, warnings, cleanup stats

test-runner manifest type:
- ValidateManifest accepts "test-runner" packages
- Excluded from sidebar nav (extensionNavItems filters surface/full only)
- DB migrations: SQLite 013, Postgres 014 (CHECK constraint)

ICD runner migration (kernel-only):
- Migrated from T.test()/T.assert() to sw.testing.suite()
- Stripped extension-dependent tests (channels, notes, personas, etc.)
- Kernel suites: smoke, crud, authz, security, providers, packaging, sdk
- Deleted ui.js + css (rendering delegated to registry surface)

SDK runner migration (kernel-only):
- Migrated from T.dualTest()/T.domains to sw.testing.suite()
- Stripped extension domains (belong in v0.7.2 package runners)
- Kernel suites: misc, workflows, admin, packages, connections, deps, composition

Runner registry surface (/s/test-runners):
- Admin-only dashboard discovering test-runner packages
- Run All / per-runner Run buttons, real-time results
- Export Failures / Export Full Results (JSON download)
- Dark mode styling using kernel CSS variables
- Suite count polling for async runner script loading

141 passed, 0 failed on fresh minimal install.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/handlers/package_validate_test.go

@@ -153,6 +153,40 @@ func TestValidateManifest_Dependencies(t *testing.T) {
 	}
 }
 
+func TestValidateManifest_ValidTestRunner(t *testing.T) {
+	m := map[string]any{
+		"id":    "icd-test-runner",
+		"title": "ICD Test Runner",
+		"type":  "test-runner",
+	}
+	info, err := ValidateManifest(m)
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+	if info.Type != "test-runner" {
+		t.Errorf("expected type 'test-runner', got %q", info.Type)
+	}
+}
+
+func TestValidateManifest_TestRunnerWithRequires(t *testing.T) {
+	m := map[string]any{
+		"id":       "chat-runner",
+		"title":    "Chat Runner",
+		"type":     "test-runner",
+		"requires": []any{"chat", "chat-core"},
+	}
+	info, err := ValidateManifest(m)
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+	if len(info.Requires) != 2 {
+		t.Errorf("expected 2 requires, got %d", len(info.Requires))
+	}
+	if info.Requires[0] != "chat" || info.Requires[1] != "chat-core" {
+		t.Errorf("unexpected requires: %v", info.Requires)
+	}
+}
+
 func TestValidateManifest_WorkflowNoDef(t *testing.T) {
 	m := map[string]any{
 		"id":    "my-wf",