feat: add work verification closeouts #133

Job	Run time
test (3.12)	23s
content-guard	7s
install-from-source (kitchen-sink, --depth workspace --harnesses claude,codex,openclaw,hermes)	19s
install-from-source (workspace+claude+openclaw, --depth workspace --harnesses claude,openclaw)	15s
install-from-source (repo+claude+publisher, --depth repo --harnesses claude --include publisher)	15s
install-from-source (repo+codex, --depth repo --harnesses codex)	18s
install-from-source (workspace+none, --depth workspace --harnesses none)	12s
install-from-source (workspace+codex+openclaw, --depth workspace --harnesses codex,openclaw)	13s
test (3.10)	15s
test (3.11)	19s
install-from-source (repo+claude, --depth repo --harnesses claude)	17s
	2m 53s

Provide feedback