test: add acceptance harness, pcd_identity_auth_scope acc test, and CI

Formal Gate B: TestAccIdentityAuthScopeDataSource_basic passes against the CE lab
(terraform v1.15.8 + terraform-plugin-testing v1.16.0).

- internal/acctest: protocol-6 provider factory + PreCheck (skips cleanly with no lab).
- Acceptance test for pcd_identity_auth_scope, configured from OS_* env.
- .github/workflows/test.yml: build, vet, gofmt, unit tests, terraform fmt on examples.
- Record golangci-lint / docs-drift CI as deferred to the docs phase (DECISIONS.md).

Author: PF9-pushkar

.github/workflows/test.yml

@@ -0,0 +1,41 @@
+name: test
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  build-test:
+    name: build / vet / fmt / unit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          cache: true
+      - name: build
+        run: go build ./...
+      - name: vet
+        run: go vet ./...
+      - name: gofmt
+        run: |
+          out="$(gofmt -l .)"
+          if [ -n "$out" ]; then echo "gofmt needed on:"; echo "$out"; exit 1; fi
+      - name: unit tests
+        # Acceptance (TF_ACC) and live (PCD_LIVE_TEST) tests self-skip here.
+        run: go test ./internal/... -timeout 120s
+
+  terraform-fmt:
+    name: terraform fmt (examples)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_wrapper: false
+      - run: terraform fmt -check -recursive ./examples

CHANGELOG.md

@@ -19,6 +19,9 @@ All notable changes to this project are documented here. The format is based on
   domain, and roles.
 - Committed CE 2026.4 compatibility evidence from Step 0 preflight
   (`docs/compatibility/ce-2026.4.md`).
+- Acceptance test harness (`internal/acctest`: protocol-6 provider factory + `PreCheck`)
+  and the first acceptance test for `pcd_identity_auth_scope` (passes against the CE lab).
+- `test.yml` CI: build, vet, gofmt, unit tests, and `terraform fmt` on examples.
 
 ### Known gaps
 - `cloud` (clouds.yaml) is declared but not yet implemented; it errors if set.

DECISIONS.md

@@ -55,6 +55,18 @@ tests arrive. Low risk; no locked decision affected.
   API is compatible.
 - **terraform-plugin-framework**: **v1.19.0** as planned.
 
+## 2026-07-10 — Gate B passed; CI scope for now
+
+`TestAccIdentityAuthScopeDataSource_basic` passes against the live lab (terraform
+v1.15.8 + terraform-plugin-testing v1.16.0). `test.yml` CI currently runs
+build/vet/gofmt/unit + `terraform fmt` on examples — all verified green locally.
+**golangci-lint and the `make generate` docs-drift gate are deferred** to the docs phase
+(they need `tools/` + a golangci-lint v2 config); tracked so CI stays green until then.
+
+Terraform was installed from the official `releases.hashicorp.com` prebuilt binary
+(v1.15.8, darwin_arm64) because `brew install hashicorp/tap/terraform` failed on outdated
+Xcode Command Line Tools on the build host.
+
 ## 2026-07-10 — `cloud` (clouds.yaml) deferred
 
 Declared in the provider schema for config-parity with `terraform-provider-openstack`,

go.mod

@@ -5,29 +5,59 @@ go 1.25.8
 require (
 	github.com/gophercloud/gophercloud/v2 v2.13.0
 	github.com/hashicorp/terraform-plugin-framework v1.19.0
+	github.com/hashicorp/terraform-plugin-go v0.31.0
+	github.com/hashicorp/terraform-plugin-testing v1.16.0
 )
 
 require (
+	github.com/ProtonMail/go-crypto v1.4.1 // indirect
+	github.com/agext/levenshtein v1.2.3 // indirect
+	github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect
+	github.com/cloudflare/circl v1.6.3 // indirect
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
+	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/hashicorp/errwrap v1.1.0 // indirect
+	github.com/hashicorp/go-checkpoint v0.5.0 // indirect
+	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
+	github.com/hashicorp/go-cty v1.5.0 // indirect
 	github.com/hashicorp/go-hclog v1.6.3 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
 	github.com/hashicorp/go-plugin v1.7.0 // indirect
+	github.com/hashicorp/go-retryablehttp v0.7.8 // indirect
 	github.com/hashicorp/go-uuid v1.0.3 // indirect
-	github.com/hashicorp/terraform-plugin-go v0.31.0 // indirect
+	github.com/hashicorp/go-version v1.9.0 // indirect
+	github.com/hashicorp/hc-install v0.9.4 // indirect
+	github.com/hashicorp/hcl/v2 v2.24.0 // indirect
+	github.com/hashicorp/logutils v1.0.0 // indirect
+	github.com/hashicorp/terraform-exec v0.25.1 // indirect
+	github.com/hashicorp/terraform-json v0.27.2 // indirect
 	github.com/hashicorp/terraform-plugin-log v0.10.0 // indirect
+	github.com/hashicorp/terraform-plugin-sdk/v2 v2.40.0 // indirect
 	github.com/hashicorp/terraform-registry-address v0.4.0 // indirect
-	github.com/hashicorp/terraform-svchost v0.1.1 // indirect
+	github.com/hashicorp/terraform-svchost v0.2.1 // indirect
 	github.com/hashicorp/yamux v0.1.2 // indirect
 	github.com/mattn/go-colorable v0.1.14 // indirect
 	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mitchellh/copystructure v1.2.0 // indirect
 	github.com/mitchellh/go-testing-interface v1.14.1 // indirect
-	github.com/oklog/run v1.1.0 // indirect
+	github.com/mitchellh/go-wordwrap v1.0.1 // indirect
+	github.com/mitchellh/mapstructure v1.5.0 // indirect
+	github.com/mitchellh/reflectwalk v1.0.2 // indirect
+	github.com/oklog/run v1.2.0 // indirect
+	github.com/vmihailenco/msgpack v4.0.4+incompatible // indirect
 	github.com/vmihailenco/msgpack/v5 v5.4.1 // indirect
 	github.com/vmihailenco/tagparser/v2 v2.0.0 // indirect
-	golang.org/x/net v0.48.0 // indirect
+	github.com/zclconf/go-cty v1.18.1 // indirect
+	golang.org/x/crypto v0.52.0 // indirect
+	golang.org/x/mod v0.35.0 // indirect
+	golang.org/x/net v0.54.0 // indirect
+	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.45.0 // indirect
-	golang.org/x/text v0.32.0 // indirect
+	golang.org/x/text v0.37.0 // indirect
+	golang.org/x/tools v0.44.0 // indirect
+	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
-	google.golang.org/grpc v1.79.2 // indirect
+	google.golang.org/grpc v1.79.3 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 )