ci: add manual bypasses for live OAR checks

[johnnygreco]

Live OAR checks currently fail when the inference provider is unavailable, with no manual way to waive those checks. Add a skip-oar-live PR label and an OAR_SKIP_LIVE=true repository Actions variable to bypass new-project reviews and live integration during external outages. Label changes trigger fresh runs, and reports explicitly identify bypassed execution without claiming a passing verdict. Offline functional, package, and runtime checks remain enabled.

The failure in PR #38's CI run was an upstream Bedrock HTTP 503 in both attempts, after sandbox creation and uploads succeeded. A subsequent direct request using the local endpoint configuration and the same model returned HTTP 200; the failing CI job was not rerun.

The CI guide documents activation, recovery, label permissions, and workflow revision requirements. These changes must land before the controls can be used; no bypass has been activated.

Validation:

• CI routing, transport, profile, input, report, and PR-flow regression suite: 71 passed; focused request/report rerun after adding case-insensitive label coverage: 34 passed.
• OAR make check: 156 tests passed, including formatting, lint, and type checks; make build passed.
• Actionlint passed for the three OAR workflows; changed Python files passed Ruff checks.
• Dev Notes tests, documentation tests, and clean strict documentation build passed. Served the built CI guide locally and confirmed HTTP 200 and the bypass instructions.

[github-actions]

Documentation preview

The preview has been removed.