docs: add missing approval-summary and compiler-smoke-e2e dirs to ado-script tree

AGENTS.md

@@ -270,6 +270,7 @@ fail-closed and only pauses when the agent actually proposed a reviewed output.
 │           ├── executor-e2e/ # Stage 3 safe-output E2E test harness (not a bundle; runs deterministic scenarios against a real ADO project and files a GitHub issue on failure)
 │           ├── prepare-pr-base/ # create-pull-request preparer (bundled to prepare-pr-base.js): Agent mode uses ADO diff metadata + bounded dual-ref fallback to make the merge-base reachable; SafeOutputs mode fetches only the target worktree tip
 │           ├── trigger-e2e/ # Test-only gate-spec / trigger-evaluation harness (not a bundle): mirrors Rust `Fact::ALL` in `gate-spec.ts`; `fact-catalog.gen.json` is generated by `export-fact-catalog` and drift-guarded by CI
+│           ├── compiler-smoke-e2e/ # Test-only compiler smoke E2E orchestrator (not a bundle): stages a compiler candidate across the five smoke fixtures in `tests/compiler-smoke-e2e/`, pushes to `ado-aw-mirror`, queues fixed candidate-lane pipelines, and asserts all pass
 │           └── shared/   # Shared modules across bundles (auth, ado-client, env-facts, types.gen.ts)
 ├── tests/                # Integration tests and fixtures
 ├── docs/                 # Per-concept reference documentation (see index below)

docs/ado-script.md

@@ -554,6 +554,10 @@ scripts/ado-script/
 │   ├── conclusion/              # conclusion.js entry point + Conclusion-job reporter
 │   │   ├── index.ts             # main(): inspect upstream results + safe-outputs manifest → file/append work items
 │   │   └── __tests__/           # unit tests for signal detection and work-item filing behaviour
+│   ├── approval-summary/        # approval-summary.js entry point + safe-outputs summary renderer
+│   │   ├── index.ts             # main(): read safe_outputs.ndjson → render sanitized markdown → attach to build summary tab
+│   │   ├── render.ts            # markdown rendering helpers
+│   │   └── __tests__/           # unit tests for rendering and sanitisation paths
 │   ├── github-app-token/        # github-app-token.js entry point + GitHub App token minter
 │   │   ├── index.ts             # main(): RS256 JWT → resolve installation → mint installation token → masked GITHUB_APP_TOKEN
 │   │   └── __tests__/           # unit tests for JWT signing / installation resolution / token minting
@@ -564,7 +568,8 @@ scripts/ado-script/
 │   │   ├── gate-spec.ts         # FACT_META mirror of Rust Fact::ALL; drift-guarded by export-fact-catalog + fact-catalog.gen.json
 │   │   ├── fact-catalog.gen.json # generated by `cargo run -- export-fact-catalog`; deep-compared by gate-spec.test.ts
 │   │   └── __tests__/           # gate-spec drift tests and trigger-evaluation scenario tests
-│   └── executor-e2e/            # test-only: Stage 3 safe-output E2E harness (not a bundle; built to test-bin/executor-e2e.js)
+│   ├── executor-e2e/            # test-only: Stage 3 safe-output E2E harness (not a bundle; built to test-bin/executor-e2e.js)
+│   └── compiler-smoke-e2e/      # test-only: compiler smoke E2E orchestrator (not a bundle); stages a compiler candidate across the five smoke fixtures, pushes to ado-aw-mirror, queues fixed candidate-lane pipelines, and asserts all pass
 ├── test/                        # End-to-end smoke tests (gate, import, exec-context-pr)
 ├── gate.js                      # ncc bundle output (gitignored)
 ├── import.js                    # ncc bundle output (gitignored)