fix(smoke): bound each bootstrap request and run the tests in CI

Both from Greptile on #12316.

The retry loop only checks its deadline between attempts, so an unbounded
curl that connects and then stalls never returns to be checked. That would
have run the job to its 45-minute timeout printing nothing — strictly worse
than the single-attempt failure this change set out to fix. Cap each request
with --max-time and --connect-timeout.

The repository enumerates its script-level node:test files one by one in
pr.yml, and the new suite was not among them, so six regression cases sat in
the tree without running. Add it.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.github/workflows/pr.yml

@@ -72,6 +72,9 @@ jobs:
       - name: Test standalone package build concurrency
         run: node --test ./scripts/__tests__/build-standalone-concurrency.test.mjs
 
+      - name: Test release smoke admin bootstrap
+        run: node --test ./scripts/__tests__/docker-onboard-smoke-bootstrap.test.mjs
+
       - name: Validate release package manifest
         run: node ./scripts/release-package-map.mjs check