#8 Property testing

Summary by cubic

Adds Tier 2 property testing and a live conformance job against the official GitHub Actions runner. Aligns our runner with documented contracts for action lifecycle, workflow/file commands, secret masking, and protocol DTOs.

• New Features

  • Added tier2-property-oracle action and tier2-property-live workflow to validate pre/main/post hooks and file-command behavior on the official runner.
  • Introduced proptest-based properties for protocol DTOs and runner behaviors; added base64 byte codecs (e.g., EncryptionKey.value) in aksh-gha-protocol.
  • Implemented WorkflowStepsUpdate endpoint in the server to cover production-path step updates; linked tests to aksh-runner.

• Bug Fixes

  • Improved :: command parsing: ignore leading spaces, trim properties, lowercase keys, and skip empty key/value pairs.
  • Secret masking now records the raw value and each non-empty CR/LF-delimited line; updates live masks accordingly.
  • Applied GITHUB_PATH in documented order and adjusted env application to match runner semantics; fixed worker dispatch test binary resolution and made the benchmark “latest” link portable.