chore(bootstrap): call packaged Rust doctor directly after install

[Fancy0uth]

Bounded first cutover

The release Skill bootstrap currently invokes legacy/check-code-intel-tools.ps1 after installation (skills/code-intel-pipeline/scripts/bootstrap.py:823-837). That script forwards to the existing native code-intel doctor bootstrap. Replace only this second subprocess with the verified packaged binary at /bin/code-intel[.exe], preserving --pipeline-root, --platform auto, --repo-path, --no-require-repowise, --json, process exit/JSON failure semantics and explicit release-root identity. Do not replace the installer with doctor: it owns PATH, Skill links and package repair.

Acceptance: packaged Windows/macOS/Linux bootstrap returns the same observation schema and fails closed for missing repo/binary; checksum/attestation, archive validation, old explicit version layout and installed-root closure still pass. Extend tests/test_skill_package.py and package integration smoke; keep legacy wrapper and historical rollback fixtures until external compatibility is proven. No baseline reset.

Coordination: intended branch main; approach is the one-path Rust doctor cutover above, then later Rust installer/CI/retirement-tooling migrations in separate bounded issues. Fancy0uth cannot apply claimed (previous REST 403); maintainer please add claimed before source edits. This issue is planning/claim request only, not a claim that the label exists.

[Fancy0uth]

Branch: main. Approach: replace only the post-install legacy/check-code-intel-tools.ps1 invocation in packaged Skill bootstrap with the release-root native code-intel doctor bootstrap; preserve installer behavior and fail-closed JSON/exit semantics. @maintainers please add the claimed label before implementation; my account received 403 on label mutation.

[Fancy0uth]

Local-only implementation evidence: skills/code-intel-pipeline/scripts/bootstrap.py now invokes release-root native doctor; Skill docs and installed-topology Python regression added. CI packaged-artifact step now runs the regression with CODE_INTEL_SMOKE_RELEASE_ROOT. Focused package 19/19, attestation 8/8; real current Windows debug package fixture native doctor success plus fail-closed missing repo (installer intercepted to avoid host mutation). No official release or macOS/Linux proof, no deletion of installer/wrapper, no commit/push. Maintainer claimed label still required before delivery.

[Fancy0uth]

Local verification update: official v0.7.1 Windows ZIP SHA256 72b56bffacda177c39467158b8265ec0d5760805c42a18a85c947a6b0ae85ed4 passed GitHub release attestation; from outside the checkout, the unskipped packaged-skill bootstrap test passed 1/1 using its release-local executable, PATH shadow, native doctor observation/root, and fail-closed missing binary. Package suite 19/19 and attestation suite 8/8 passed. The published v0.7.1 doctor graphProvider.binaryFound diagnostic is false despite its binary being present (release-version defect); the test asserts behavior rather than that incidental diagnostic. This does not prove the still-PowerShell installer or current HEAD MSVC release packaging.

[2233admin]

claimed 已补上（维护者代劳，DR-0004）

Verdict: do。 本会话不接手实现，只做队列账面收敛。

Fancy0uth 2026-09-24 留言：账号只有 pull 权限，REST 打标签 403，请维护者代加 claimed。该请求在你 15:22 与 16:44 两轮本地实现证据之后发出——你已报告 bootstrap.py 改为直接调用 release-root 原生 doctor、聚焦包测试 19/19、attestation 8/8，以及官方 v0.7.1 Windows ZIP（SHA256 72b56bff…）通过 GitHub release attestation、从 checkout 之外跑通 packaged-skill bootstrap 1/1。

标签现在补齐，指向你评论中已载明的分支与一行方案。

同 #400/#401/#402 的两点提醒：

1. 该账号在本仓库没有开过任何 PR（gh pr list --author Fancy0uth 为空）。打标签只是把既有认领显式化，不构成对未提交实现的验收。DR-0001 要求安装类复现必须同 PR 进 install-smoke 闸——你的验证目前是本地证据，进入闸需要 PR。
2. 你在本票的改动集中在 skills/code-intel-pipeline/scripts/bootstrap.py 及 packaged-topology 回归。主工作树当前有 39 个未提交条目（2026-09-03 遗留 + fix: isolate verify fixtures from global Git ignores and remove measured analysis overhead #393/fix(sentrux): honor ignored test dependencies and diagnose incompatible baselines #394 的工作），其中 orchestration/integrations.json 与 internalization/*.json 存在 pin 链。动这些文件会让 orchestration/**/*.json 里钉的 digest 失配，触发契约测试失败（见 AGENTS.md）。若你的改动需要碰这些文件，先确认是否真的要动。

本票与 #395/#396/#397 同属一个贡献者批次。收敛过程中发现这三张的接管分支 agent/ux-first-run-takeover worktree 目录已被删除、分支无任何提交（相对 main 0 个）、远端不存在——那次接管的工作已不可恢复。若你也在本机留有未推送成果，先推一个 WIP 提交到远端，本次的教训是：只在本地 worktree 里的成果会随目录一起消失。