test(ldd): конкурентность, нагрузка и release gate

.gitlab-ci.yml

@@ -3,6 +3,7 @@
 # должен разрешать privileged-сервисы (docker:dind) и сеть до docker:2375.
 stages:
   - check
+  - release-evidence
 
 variables:
   GRADLE_OPTS: "-Dorg.gradle.daemon=false"
@@ -31,3 +32,31 @@ check:
   rules:
     - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
     - if: '$CI_COMMIT_BRANCH'
+
+# Ручной release gate: runtime, mutation и browser evidence.
+# Нужен privileged docker:dind; Chromium и Node ставятся в before_script.
+release-evidence:
+  stage: release-evidence
+  image: eclipse-temurin:21-jdk
+  services:
+    - name: docker:27-dind
+      alias: docker
+  before_script:
+    - apt-get update
+    - apt-get install -y nodejs npm
+    - cd e2e && npm ci && npx playwright install --with-deps chromium && cd ..
+  cache:
+    key: "gradle-$CI_COMMIT_REF_SLUG"
+    paths:
+      - .gradle/caches
+      - .gradle/wrapper
+  script:
+    - ./scripts/ldd-release.sh
+  artifacts:
+    when: always
+    paths:
+      - build/evidence/
+      - build/reports/evidence/
+  rules:
+    - if: '$CI_COMMIT_BRANCH'
+      when: manual