Verify local provisioning across all adapters #297

Description

Section 9 of #288 covers adapter contract tests, smoke matrix and final clean-worktree proof. PR #287 contains the proposed implementation but remains unmerged. Dependencies: #289, #290, #291, #292, #293, #294, #295, #296.

Steps to reproduce

Inspection steps (no tests executed):

1. Inspect main Adapter::provision contract.
2. Compare this section’s tasks in local-provision plan with the open branch.
3. Confirm the local-provision contract is still absent from main rather than treating checked-off branch tasks as delivery.

Expected behavior

The section’s contract is present on main and composes with the other local-provision sections without cloud operations during local mode.

Impact

The umbrella cannot be accepted until per-adapter behavior and original-tree preservation have executable evidence.

Proposed fix

Review and merge this section through PR #287, preserving the tasks below and subsequent umbrella amendments. Reconcile with current main rather than reintroducing removed Fastly runtime-env descriptors.

Dependencies: #289, #290, #291, #292, #293, #294, #295, #296.

Done when

• Task 38: Cloudflare provision_local_* suite (four tests + push preservation + zero-cloud-calls via panicking fake wrangler)
• Task 39: Fastly provision_local_* suite (same four + push-side [[local_server.secret_stores.*]] preservation + fake_fastly_panicking)
• Task 40: Spin provision_local_* suite + Spin env-label alignment quartet (writes/labels-line-up/overlay-round-trips/operator-uncomment-preserved)
• Task 41: Axum provision_local_* suite (focus: axum.toml MUST NOT be mutated)
• Task 42: Adapter contract test sweep — verify all tests/contract.rs still pass under new ProvisionOutcome return type
• Task 43: Final CI gate run + smoke matrix + worktree-clean verification (umbrella gate)
• Record fresh final-head verification, including all adapter smoke combinations and git status --porcelain empty after the matrix; branch history is not a substitute.

Required repository verification: cargo fmt --all -- --check; cargo clippy --workspace --all-targets --all-features -- -D warnings; cargo test --workspace --all-targets; cargo check --workspace --all-targets --features "fastly cloudflare spin"; cargo check -p edgezero-adapter-spin --target wasm32-wasip2 --features spin. These are acceptance requirements, not tests executed during this audit.

Related

#288; local-provision plan; PR #287 is the fully covering open PR. #289, #290, #291, #292, #293, #294, #295, #296

July amendment: all five generated manifests, including axum.toml, are gitignored.