fix: CI failures — stale Codex yaml, actionlint config, shellcheck

- Regenerate Codex .agents/ files (setup-browser-cookies description changed)
- Add actionlint.yaml to whitelist ubicloud-standard-2 runner label
- Add shellcheck disable for intentional word splitting in evals.yml

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.agents/skills/gstack-setup-browser-cookies/agents/openai.yaml

@@ -1,6 +1,6 @@
 interface:
   display_name: "gstack-setup-browser-cookies"
-  short_description: "Import cookies from your real browser (Comet, Chrome, Arc, Brave, Edge) into the headless browse session. Opens an..."
+  short_description: "Import cookies from your real Chromium browser into the headless browse session. Opens an interactive picker UI..."
   default_prompt: "Use gstack-setup-browser-cookies for this task."
 policy:
   allow_implicit_invocation: true

.github/workflows/evals.yml

@@ -157,6 +157,7 @@ jobs:
 
           TOTAL=0; PASSED=0; FAILED=0; COST="0"
           SUITE_LINES=""
+          # shellcheck disable=SC2086  # intentional word splitting
           for f in $RESULTS; do
             T=$(jq -r '.total_tests // 0' "$f")
             P=$(jq -r '.passed // 0' "$f")

actionlint.yaml

@@ -0,0 +1,3 @@
+self-hosted-runner:
+  labels:
+    - ubicloud-standard-2