fix(ruby): improve Rails setup and prepare Fizzy acceptance

[nicknisi]

Summary

Carry AUTH-6736 forward with scoped CLI fixes and offline Fizzy fixture preparation—not successful hosted Fizzy acceptance.

• Fix Ruby credential delivery and callback/origin consistency while retaining the common post-agent URL provisioning safeguards.
• Require visible login/account/logout UI and real application session integration without choosing account-linking or auth-coexistence policy; report unverified behavior truthfully.
• Add a pinned, isolated Fizzy fixture/bootstrap path, explicitly selectable evaluation scenario, and offline regression coverage. Static source checks do not count as behavioral acceptance.

Acceptance status and blockers

AUTH-6736 remains incomplete until real-app acceptance is proven. No paid agents, live auth/provisioning, or hosted AuthKit acceptance run was executed for this work.

Remaining prerequisites:

• Nick-approved account/identity mapping, creation, membership/role, and authentication-coexistence policy. No proposed policy is implemented here.
• The pinned toolchain: Ruby 3.4.8 and Bundler 4.0.18; the available local versions did not match.
• Explicit sandbox/access and spending approval before any paid agent, live authentication, provisioning, or dashboard changes.
• Retained browser/session/hosted evidence for visible controls, callback identity/account association, repeat-login idempotence, logout access denial, correctly targeted URL settings, and preserved account boundaries/routes.

The Fizzy acceptance runbook and evidence matrix documents the immutable source pin, isolated preparation, precise remaining prerequisites, and future-run procedure. Source path: tests/fixtures/ruby/fizzy/README.md.

Branch-creation behavior and existing authentication-coexistence decisions are unchanged.

Validation

Local and supervisor checks passed: 3,231 tests, TypeScript, lint, and formatting. bun run build also passed. Offline fixture preparation verified the pinned archive; runtime and hosted acceptance remain unverified.

[linear-code]

AUTH-6736

[greptile-apps]

Confidence Score: 5/5

[Medium risk] Adds Ruby integration setup and evaluation test infrastructure.

The changes since the previous review appear safe to merge; Fizzy acceptance remains explicitly unverified.

Summary

The PR updates Ruby credential delivery and setup guidance, adds an isolated Fizzy fixture and opt-in evaluation path, and keeps behavioral acceptance explicitly unverified. Changes since the previous review protect non-JS eval credentials and prevent automatic repeat Fizzy runs.

_{Reviews (2) · Last reviewed commit: "test: isolate destructive skills extract..."}