feat: add ops center and node onboarding flow

prepare_final_release.ps1

@@ -6,7 +6,7 @@ $reportPath = Join-Path $releaseRoot "final_release_report.json"
 
 New-Item -ItemType Directory -Force -Path $releaseRoot | Out-Null
 
-powershell -ExecutionPolicy Bypass -File (Join-Path $root "package_domain_release.ps1")
+& (Join-Path $root "package_domain_release.ps1")
 
 $latestJsonPath = Join-Path $releaseRoot "latest_release.json"
 if (-not (Test-Path -LiteralPath $latestJsonPath)) {
@@ -14,22 +14,38 @@ if (-not (Test-Path -LiteralPath $latestJsonPath)) {
 }
 
 $latest = Get-Content -LiteralPath $latestJsonPath -Raw | ConvertFrom-Json
+$archivePath = if ($latest.archive_path) { $latest.archive_path } else { $latest.zip_path }
 
-$verifyOutput = powershell -ExecutionPolicy Bypass -File (Join-Path $root "verify_domain_release.ps1") `
-    -ZipPath $latest.zip_path `
+$verifyOutput = & (Join-Path $root "verify_domain_release.ps1") `
+    -ZipPath $archivePath `
     -HashPath $latest.sha256_path
 
 $verify = $verifyOutput | ConvertFrom-Json
+$verifyOk = [bool]$verify.ok
+$smokeOk = [bool]$latest.smoke_test_ok
+$blockedReasons = @()
+if (-not $verifyOk) {
+    $blockedReasons += "verify_failed"
+}
+if (-not $smokeOk) {
+    $blockedReasons += "smoke_test_failed_or_skipped"
+}
 
 $report = [ordered]@{
     generated_at = (Get-Date).ToString("s")
-    ok = [bool]$verify.ok
+    ok = ($verifyOk -and $smokeOk)
     latest_release = $latest
     verify = $verify
+    release_gate = [ordered]@{
+        verify_ok = $verifyOk
+        smoke_test_ok = $smokeOk
+        blocked_reasons = $blockedReasons
+        decision = if ($blockedReasons.Count -eq 0) { "ready" } else { "blocked" }
+    }
 }
 
 $report | ConvertTo-Json -Depth 8 | Set-Content -LiteralPath $reportPath -Encoding UTF8
 
 Write-Host "final release prepared"
 Write-Host "report: $reportPath"
-Write-Host "ok: $($verify.ok)"
+Write-Host "ok: $($report.ok)"