- add full harness testing job with environment-bound secrets\n- add workflow_dispatch, push trigger for testing branch, portal build check\n- document Testing environment setup and CI behavior\n- align workflow environment name with existing GitHub environment
