ci: exclude tests requiring API_KEY from e2e workflow

Tests that need a real DashScope API_KEY for LLM invocation cannot run
in CI with OIDC-only credentials. Exclude them via --ignore and -k:

- test_agent_ruintime.py: AgentRuntime lifecycle needs OSS bucket access
- test_workspace_id.py: requires AGENTRUN_TEST_WORKSPACE_ID
- invoke/with_credential/model_proxy: require real API_KEY for LLM calls

Remaining tests (credential CRUD, model_service lifecycle, all sandbox
tests) run with OIDC temporary credentials only.

Change-Id: Ic8da4460f6f4942d8afd89c4da2bd344acfc2532
Co-developed-by: Claude <noreply@anthropic.com>

Author: congxiao-wxx

.github/workflows/e2e.yml

@@ -64,10 +64,14 @@ jobs:
         AGENTRUN_REGION: ${{ secrets.AGENTRUN_REGION }}
         AGENTRUN_CONTROL_ENDPOINT: ${{ secrets.AGENTRUN_CONTROL_ENDPOINT }}
         AGENTRUN_DATA_ENDPOINT: ${{ secrets.AGENTRUN_DATA_ENDPOINT }}
-        # API_KEY and AGENTRUN_TEST_WORKSPACE_ID are intentionally NOT set
-        # so tests requiring them are automatically skipped via skipif markers.
+        # API_KEY and AGENTRUN_TEST_WORKSPACE_ID are intentionally NOT set.
+        # Tests requiring them are excluded via --ignore and -k filters below.
       run: |
-        uv run pytest tests/e2e/ -v --tb=short --ignore=tests/e2e/integration
+        uv run pytest tests/e2e/ -v --tb=short \
+          --ignore=tests/e2e/integration \
+          --ignore=tests/e2e/test_agent_ruintime.py \
+          --ignore=tests/e2e/test_workspace_id.py \
+          -k "not (invoke or with_credential or model_proxy)"
 
     - name: E2E Summary
       if: always()