ci: move validation workflows off self-hosted Python runner

.github/workflows/aragora-gauntlet.yml

@@ -10,7 +10,7 @@ concurrency:
 jobs:
   gauntlet:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
     permissions:
       contents: read

.github/workflows/aragora-review-gate.yml

@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   changes:
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 3
     outputs:
       should_review: ${{ steps.filter.outputs.code }}
@@ -69,7 +69,7 @@ jobs:
   review:
     needs: changes
     if: needs.changes.outputs.should_review == 'true' && !github.event.pull_request.draft
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     permissions:
       contents: read
@@ -245,7 +245,7 @@ jobs:
   aragora-review:
     if: always()
     needs: [changes, review]
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 2
     steps:
       - name: Gate result

.github/workflows/autopilot-worktree-e2e.yml

@@ -17,7 +17,7 @@ jobs:
   scope:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Autopilot Scope
-    runs-on: aragora
+    runs-on: ubuntu-latest
     outputs:
       run_autopilot: ${{ steps.filter.outputs.run_autopilot }}
 
@@ -73,7 +73,7 @@ jobs:
 
   autopilot-api-e2e:
     name: Autopilot API E2E
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     needs: scope
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name != 'pull_request' || needs.scope.outputs.run_autopilot == 'true')

.github/workflows/backup-verification.yml

@@ -22,7 +22,7 @@ permissions:
 jobs:
   backup-tests:
     name: Backup System Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
 
     steps:
@@ -90,7 +90,7 @@ jobs:
 
   dr-drill-tests:
     name: DR Drill Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 45
     needs: backup-tests
 
@@ -144,7 +144,7 @@ jobs:
 
   backup-handler-tests:
     name: Backup Handler Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 20
     needs: backup-tests
 
@@ -192,7 +192,7 @@ jobs:
 
   summary:
     name: Generate Summary
-    runs-on: aragora
+    runs-on: ubuntu-latest
     needs: [backup-tests, dr-drill-tests, backup-handler-tests]
     if: always()
 

.github/workflows/benchmark.yml

@@ -27,7 +27,7 @@ jobs:
   benchmark:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Performance Benchmarks
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
 
     steps:
@@ -118,7 +118,7 @@ jobs:
     # REQUIRED STATUS CHECK: This job must pass on all PRs.
     # Validates that fast-first routing reduces critique latency by >=25%.
     name: Orchestration Speed Smoke
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 10
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.ref == 'refs/heads/main' || github.event_name == 'pull_request')
 
@@ -168,7 +168,7 @@ jobs:
     # REQUIRED STATUS CHECK: This job must pass on all PRs.
     # Fails if any benchmark regresses by >20% vs main branch.
     name: Performance Regression Check
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 20
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request')
 
@@ -284,7 +284,7 @@ jobs:
 
   latency-tests:
     name: Latency Distribution
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     if: (github.event_name != 'pull_request' || github.event.pull_request.draft == false) && (github.ref == 'refs/heads/main' || github.event_name == 'workflow_dispatch')
 
@@ -345,7 +345,7 @@ jobs:
 
   baseline-comparison:
     name: Baseline Comparison
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.ref == 'refs/heads/main' || github.event_name == 'pull_request')
 

.github/workflows/benchmarks.yml

@@ -33,7 +33,7 @@ jobs:
   regression-gate:
     if: github.event_name == 'merge_group' || github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Regression Gate
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 20
 
     steps:

.github/workflows/capability-gap.yml

@@ -31,7 +31,7 @@ jobs:
   report:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Generate Capability Gap Report
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 10
 
     steps:

.github/workflows/contract-drift-governance.yml

@@ -25,7 +25,7 @@ concurrency:
 jobs:
   governance:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:

.github/workflows/core-suites.yml

@@ -25,7 +25,7 @@ jobs:
   core-suites:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Core Suites
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:
@@ -70,7 +70,7 @@ jobs:
   security-boundaries:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Security Boundaries
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:

.github/workflows/coverage.yml

@@ -13,7 +13,7 @@ concurrency:
 jobs:
   coverage:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
 
     steps:
@@ -167,7 +167,7 @@ jobs:
             }
 
   coverage-diff:
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request')
     needs: coverage

.github/workflows/docs-build.yml

@@ -36,7 +36,7 @@ env:
 jobs:
   build:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: aragora
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout

.github/workflows/e2e.yml

@@ -20,7 +20,7 @@ jobs:
   e2e:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Playwright E2E Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
 
     services:
@@ -195,7 +195,7 @@ jobs:
   python-e2e:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Python E2E Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 20
 
     services:
@@ -266,7 +266,7 @@ jobs:
 
   visual-regression:
     name: Visual Regression Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     needs: e2e
     if: (github.event_name != 'pull_request' || github.event.pull_request.draft == false) && (github.event_name == 'pull_request')

.github/workflows/integration-gate.yml

@@ -21,7 +21,7 @@ jobs:
   smoke-tests:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Smoke Test Harness
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:
@@ -84,7 +84,7 @@ jobs:
   api-contract-sync:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: API Contract Sync
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 10
 
     steps:
@@ -136,7 +136,7 @@ jobs:
 
   frontend-build:
     name: Frontend Build
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 12
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name != 'workflow_call')
 
@@ -205,7 +205,7 @@ jobs:
   status-doc-validation:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Status Doc Validation
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 5
 
     steps:
@@ -295,7 +295,7 @@ jobs:
 
   integration-summary:
     name: Integration Gate Summary
-    runs-on: aragora
+    runs-on: ubuntu-latest
     needs: [smoke-tests, api-contract-sync, status-doc-validation, frontend-build]
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (always())
     timeout-minutes: 2

.github/workflows/integration.yml

@@ -23,7 +23,7 @@ jobs:
   self-host-readiness:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Self-Hosted Compose Readiness
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 25
 
     steps:
@@ -101,7 +101,7 @@ jobs:
   e2e-harness:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: E2E Harness Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
 
     services:
@@ -230,7 +230,7 @@ jobs:
   integration-tests:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Integration Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 30
 
     services:
@@ -395,7 +395,7 @@ jobs:
   control-plane-tests:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     name: Control Plane Tests
-    runs-on: aragora
+    runs-on: ubuntu-latest
     timeout-minutes: 20
 
     services:
@@ -511,7 +511,7 @@ jobs:
 
   summary:
     name: Integration Summary
-    runs-on: aragora
+    runs-on: ubuntu-latest
     needs: [e2e-harness, integration-tests, control-plane-tests]
     if: (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (always())