fix(ci): remove broken integ teardown safety net + map stack name to commit sha

[ayushtr-aws]

Two coupled changes to .github/workflows/integ.yml (+ the integ smoke test), both about the integ harness's teardown/naming plumbing.

1. Remove the broken Ensure stack torn down safety net (#566)

The if: always() backstop ran raw aws cloudformation delete-stack / wait stack-delete-complete as the GitHub OIDC role, which has no cloudformation:DeleteStack or DescribeStacks permission. Both calls AccessDenied on every run; the un-guarded wait exits 255 and fails the job even when the integ test passed and integ-runner already destroyed the stack.

Evidence — run 28892156232: SUCCESS integ.task-api-smoke-TaskApiSmoke/DefaultTest 291.541s (integ-runner's own deploy → assert → destroy completed), then the safety-net step failed with AccessDenied on both CloudFormation calls.

integ-runner remains the teardown path — it forces cdk destroy on success and failure via the CDK bootstrap roles (which hold the CloudFormation permissions). Stranded-stack reclaim for cancelled/crashed runs is owned by #400 (non-blocking cleanup) and #72 (scheduled sweep).

2. Map the integ stack name to the commit SHA (int-<short-sha>-<run-number>)

Replaces the single hardcoded backgroundagent-integ stack name with a run-unique int-<short-sha>-<run-number> derived from the resolved head SHA, threaded into integ-runner via a new INTEG_STACK_NAME env var. The test falls back to backgroundagent-integ-local so the local mise //cdk:integ path is unchanged.

Why it pairs with #1: with the blocking safety net gone, a stranded stack from a cancelled/crashed run would otherwise sit under one fixed name and head-of-line block every future run (can't CREATE a name that already exists in DELETE_FAILED, and cancel-in-progress: false queues behind it). A run-unique name removes that failure mode (the run number also makes same-commit re-runs distinct); the int- prefix marks the stack ephemeral for #72's sweep. The concurrency group is now a cost/parallelism bound, not a correctness requirement.

Scope note: the naming change is a partial pull-forward of #400's first ask (ephemeral run-unique names). #400 remains open for its other two asks (offline cdk diff for the approver, non-blocking best-effort cleanup). Flagging for the reviewer since #400 isn't yet approved — happy to split this back out if preferred.

Validation

• mise //cdk:compile — clean
• mise //cdk:eslint — clean
• zizmor .github/workflows/integ.yml — no findings

Area

• tooling — root mise.toml, scripts, CI workflows
• cdk — infrastructure, handlers, constructs (integ smoke test only)

Related

Fixes #566. Partially addresses #400 (naming). Related: #72, #236.

Changes

• Remove the Ensure stack torn down step from integ.yml; update comments so the teardown story stays accurate (integ-runner in-run destroy; feat(cdk): integ harness — ephemeral stack name + offline cdk-diff gate + non-blocking stranded-stack cleanup #400/feat: automated ephemeral stack cleanup (scheduled) #72 for stranded stacks).
• Compute int-<short-sha>-<run-number> from the resolved head SHA + run number and pass it via INTEG_STACK_NAME to mise //cdk:integ.
• integ.task-api-smoke.ts reads INTEG_STACK_NAME, defaulting to backgroundagent-integ-local for the unchanged local path.
• Refresh the concurrency comment (run-unique names → single-concurrency is a cost bound, not collision prevention).

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the project license.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@092361e). Learn more about missing BASE report.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #567   +/-   ##
=======================================
  Coverage        ?   88.99%           
=======================================
  Files           ?      222           
  Lines           ?    53019           
  Branches        ?     5531           
=======================================
  Hits            ?    47182           
  Misses          ?     5837           
  Partials        ?        0           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[scottschreckengaust]

Add a unique stackName

[scottschreckengaust]

LGTM