feat(release): pin first-party agent images

docs/prds/0083-packaged-infra-artifacts.md

@@ -49,6 +49,8 @@ supply-chain boundary between release production and runtime.
   immutable orchestrator and gateway identities.
 - Docker and Apple Container acquire and run the manifest's digest-pinned OCI
   images without invoking `docker build` or `container build`.
+- The shipped Claude, Codex, and Pi agent images are built, smoke-tested,
+  published, and selected by digest as part of the same commit bundle.
 - Firecracker acquires the manifest's versioned, checksum-verified
   orchestrator and gateway rootfs artifacts rather than deriving versions at
   launch.
@@ -75,7 +77,7 @@ supply-chain boundary between release production and runtime.
 
 ## Non-goals
 
-- Changing agent/provider image builds. User Dockerfiles continue to build
+- Prebuilding user-supplied Dockerfiles. Custom agent images continue to build
   through the backend-specific agent-image paths.
 - Installing Docker, Apple Container, Firecracker, or other host prerequisites.
 - Replacing Gitea's OCI or generic-package registries.
@@ -101,7 +103,10 @@ shipped as package data:
   "source_commit": "<40 lowercase hex>",
   "oci": {
     "orchestrator": "gitea.dideric.is/didericis/bot-bottle-orchestrator@sha256:<64 hex>",
-    "gateway": "gitea.dideric.is/didericis/bot-bottle-gateway@sha256:<64 hex>"
+    "gateway": "gitea.dideric.is/didericis/bot-bottle-gateway@sha256:<64 hex>",
+    "agent_claude": "gitea.dideric.is/didericis/bot-bottle-claude@sha256:<64 hex>",
+    "agent_codex": "gitea.dideric.is/didericis/bot-bottle-codex@sha256:<64 hex>",
+    "agent_pi": "gitea.dideric.is/didericis/bot-bottle-pi@sha256:<64 hex>"
   },
   "firecracker": {
     "orchestrator": {
@@ -131,7 +136,8 @@ it refuses mutable or incomplete release inputs.
 
 The release job operates on one tested commit:
 
-1. Build the multi-architecture orchestrator and gateway OCI images.
+1. Build and smoke-test the multi-architecture orchestrator, gateway, Claude,
+   Codex, and Pi OCI images.
 2. Push them and resolve their registry manifest digests.
 3. Build Firecracker's orchestrator and gateway rootfs artifacts from the same
    source and pinned OCI bases.
@@ -158,6 +164,7 @@ immutable external bundle index under that SHA. The index contains:
 - schema version and source SHA;
 - wheel URL and SHA-256;
 - orchestrator and gateway OCI digest references;
+- Claude, Codex, and Pi agent OCI digest references;
 - Firecracker package versions and compressed-file SHA-256 values;
 - producing workflow/run identity and publication timestamp; and
 - qualification records, if any, naming the test workflow and release tag.