chore(packaging): make quickstart — one-command registry bring-up + pull-smoke CI (#653)

scripts/bootstrap.sh: idempotent bring-up for the pull-and-run deploy.
Fresh .env: copies .env.example and injects the three required secrets
using the documented one-liners (the panel token via the exact HMAC
formula issue_panel_token uses), with a standing-credential warning —
and a louder one when cloud auth is detected — since compose's :? guard
refuses an empty token unconditionally (verified live). Reused .env:
never touched, but the three required vars are pre-validated with
pointed remedies instead of compose's opaque interpolation error. Then
pull + up -d + a doctor-style readiness sweep grounded in the real
surfaces (root /health, /api/auth/status through nginx, the verbatim
'Alembic upgrade finished' log line, ollama list), each stage failing
loud with the command to run next. Exposed as make quickstart; README
leads with it and keeps the manual steps as 'what quickstart does'.

Also found and fixed along the way: the documented registry quickstart
was already broken — nginx's :?-required ROBOCO_PANEL_AGENT_TOKEN ships
empty in .env.example, so the 4-step path failed at compose config.

release.yml gains a pull-smoke job (fresh runner, own GHCR login,
needs publish-images): literally pulls the registry compose against the
just-published tag, guarding the missing-image regression class that
already happened once.

Co-authored-by: Renn F <rennf93@users.noreply.github.com>

Makefile

@@ -71,6 +71,15 @@ infra-down:
 	@echo "Stopping infrastructure..."
 	@docker compose down
 
+# One-command bring-up for the registry (pull-and-run) deploy: scaffolds .env
+# with freshly generated secrets on first run (never touches an existing one),
+# pulls + starts docker-compose.registry.yml, then polls until the stack is
+# genuinely ready and prints a doctor-style summary. See scripts/bootstrap.sh
+# for the grounded health/readiness probes.
+.PHONY: quickstart
+quickstart:
+	@./scripts/bootstrap.sh
+
 # Run database migrations
 .PHONY: migrate
 migrate:
@@ -479,6 +488,7 @@ help:
 	@echo "RoboCo - AI Agents Company"
 	@echo ""
 	@echo "Infrastructure:"
+	@echo "  make quickstart               - One-command bring-up (registry pull-and-run)"
 	@echo "  make infra                    - Start PostgreSQL + Redis"
 	@echo "  make infra-down               - Stop infrastructure"
 	@echo "  make migrate                  - Run database migrations"