ci(system-test): drive node bring-up through trond [Phase A — DO NOT MERGE]

Replace the inline `nohup java -jar build/libs/FullNode.jar --witness
-c <conf> &` block with a declarative trond invocation that
encapsulates: HOCON template embedding, systemd-managed lifecycle,
deterministic teardown, and structured log/journal capture.

Net effect:
  - Same single-SR private chain, same testng.conf endpoints
    (HTTP 8090 / gRPC 50051 / P2P 18888 / JSON-RPC 8545).
  - The 80+ line "Copy config and start FullNode" step shrinks to
    one bash invocation: `bash system-test/scripts/stest-up.sh`.
  - On failure, the systemd journal for the unit is dumped to
    logs/journal.log instead of relying on ad-hoc fullnode.log.
  - Teardown step (`if: always()`) runs `trond network destroy`
    so the next CI run starts clean.

This commit is Phase A: the system-test checkout points at
warku123/system-test:feat/trond-bridge and stest-up.sh defaults
to warku123/tron-deployment v0.1.0 release. A follow-up Phase B
commit on this branch will flip both references to upstream
(tronprotocol/system-test:release_workflow + the upstream trond
release URL) once tron-deployment has merged the
system-test-integration change and cut v0.1.0 on upstream.

Until then this PR must not be merged into upstream.

Linked: openspec change `system-test-integration` in
tronprotocol/tron-deployment (Phase 4).

Author: warku123

.github/workflows/system-test.yml

@@ -27,11 +27,20 @@ jobs:
           java-version: '8'
           distribution: 'temurin'
 
+      # Phase A note: while the system-test integration is under
+      # review, this checkout points at the warku123 fork's
+      # feat/trond-bridge branch so the new scripts/stest-up.sh and
+      # the trond-based bring-up flow can be exercised end-to-end on
+      # this fork's CI. Once tronprotocol/tron-deployment has merged
+      # the system-test-integration change and cut v0.1.0, the
+      # repository / ref below will be flipped back to
+      # tronprotocol/system-test + release_workflow as part of the
+      # Phase B switchover commit.
       - name: Clone system-test
         uses: actions/checkout@v5
         with:
-          repository: tronprotocol/system-test
-          ref: release_workflow
+          repository: warku123/system-test
+          ref: feat/trond-bridge
           path: system-test
 
       - name: Checkout java-tron
@@ -52,28 +61,14 @@ jobs:
         working-directory: java-tron
         run: ./gradlew clean build -x test --no-daemon
 
-      - name: Copy config and start FullNode
-        run: |
-          cp system-test/testcase/src/test/resources/config-system-test.conf java-tron/
-          cd java-tron
-          nohup java -jar build/libs/FullNode.jar --witness -c config-system-test.conf > fullnode.log 2>&1 &
-          echo "FullNode started, waiting for it to be ready..."
-
-          MAX_ATTEMPTS=60
-          INTERVAL=5
-          for i in $(seq 1 $MAX_ATTEMPTS); do
-            if curl -s --fail "http://localhost:8090/wallet/getblockbynum?num=1" > /dev/null 2>&1; then
-              echo "FullNode is ready! (attempt $i)"
-              exit 0
-            fi
-            echo "Waiting... (attempt $i/$MAX_ATTEMPTS)"
-            sleep $INTERVAL
-          done
-
-          echo "FullNode failed to start within $((MAX_ATTEMPTS * INTERVAL)) seconds."
-          echo "=== FullNode log (last 50 lines) ==="
-          tail -50 fullnode.log || true
-          exit 1
+      # Phase A note: trond release URL points at the warku123 fork
+      # while the system-test integration is in review. The Phase B
+      # switchover commit will repoint to
+      # tronprotocol/tron-deployment after upstream merge + release.
+      - name: Bring up the stest single-SR via trond
+        env:
+          STEST_JAR: ${{ github.workspace }}/java-tron/build/libs/FullNode.jar
+        run: bash system-test/scripts/stest-up.sh
 
       - name: Run system tests
         working-directory: system-test
@@ -86,10 +81,30 @@ jobs:
           ./gradlew clean --no-daemon
           ./gradlew --info stest --no-daemon
 
-      - name: Upload FullNode log
+      - name: Capture node log + journal
+        if: always()
+        run: |
+          mkdir -p logs
+          # trond writes the FullNode stdout/stderr through systemd's
+          # journal; dump the full journal for the unit so post-mortem
+          # works without ssh access to the runner.
+          sudo journalctl -u tron-stest-singlenode --no-pager -o short-iso > logs/journal.log 2>&1 || true
+          # If a node.log exists in the install path (some trond
+          # invocations write directly), capture that too.
+          sudo cp /opt/tron/stest-singlenode/node.log logs/node.log 2>/dev/null || true
+          sudo chown -R "$USER:$USER" logs/
+          ls -lah logs/
+
+      - name: Tear down stest deployment
+        if: always()
+        env:
+          STEST_KEEP_DATA: ""
+        run: bash system-test/scripts/stest-down.sh
+
+      - name: Upload trond + node logs
         if: always()
         uses: actions/upload-artifact@v6
         with:
-          name: fullnode-log
-          path: java-tron/fullnode.log
+          name: stest-node-logs
+          path: logs/
           if-no-files-found: warn