fix: harden smoke-claude safe output instructions

Author: Copilot

.github/workflows/smoke-claude.md

@@ -125,6 +125,8 @@ Your tasks (1 line per result):
 3. **File verify**: Confirm file exists at `/tmp/gh-aw/agent/smoke-test-claude-${{ github.run_id }}.txt`
 
 Call safe-outputs immediately after these 3 reads.
+- Call tools directly (`add_comment`, `add_labels`, `noop`) — do not run `safeoutputs ...` via Bash/CLI.
+- Never call `add_comment` or `add_labels` with empty arguments. If you're not ready to send final output, call `noop` with a short message.
 
 **If triggered by pull request**: add a brief comment (✅/❌ per test, PASS/FAIL total) and add label `smoke-claude` if all pass.
 **If not triggered by pull request**: use noop to report results.

scripts/ci/smoke-claude-workflow.test.ts

@@ -16,6 +16,8 @@ describe('smoke claude workflow optimization config', () => {
     expect(source).not.toContain("grep -oP '(?<=<title>)[^<]+'");
     expect(source).toContain('> "$CONTEXT_FILE"');
     expect(source).toContain('**IMPORTANT — Complete in 1 pass:**');
+    expect(source).toContain('do not run `safeoutputs ...` via Bash/CLI');
+    expect(source).toContain('Never call `add_comment` or `add_labels` with empty arguments');
     expect(source).not.toContain('tools:\n  playwright:');
     expect(source).not.toContain('    - playwright');
     expect(source).not.toContain('Ensure playwright log directory is writable');