Run the complete CI stack reliably

[dimavrem22]

Summary

• orchestrate channels, voice, and external-event live suites sequentially behind one shared tunnel lock
• run the full live stack on ready same-repo PRs and after each successful twice-daily Codex canary
• expose one aggregate full-stack gate and page only failures chained from scheduled canaries
• run the complete offline suite against the latest Codex prerelease twice daily
• update official GitHub Actions and preserve manual component dispatches
• correlate live email assertions to post-request substantive deliveries
• replace prompt-dependent external call assertions with signature/session boundary checks
• route generic external event IDs without mistaking them for call IDs

Validation

• python3 -m pytest -q — 283 passed, 23 skipped
• actionlint (ignoring the GitHub-supported concurrency.queue key absent from the older local schema)
• git diff --check

Not intended to merge until review.