improve: validate built CLI with Bun 1.4 (#129192)

* ci: validate built CLI with Bun 1.4

Amp-Thread-ID: https://ampcode.com/threads/T-01a037b7-66db-71f0-91e7-1578b383afb2

* test: align Bun Docker image assertion

Amp-Thread-ID: https://ampcode.com/threads/T-01a037b7-66db-71f0-91e7-1578b383afb2

* test: tolerate cold CLI startup in CI

Amp-Thread-ID: https://ampcode.com/threads/T-01a037b7-66db-71f0-91e7-1578b383afb2

---------

Co-authored-by: Amp <amp@ampcode.com>

.github/workflows/ci.yml

@@ -1346,7 +1346,7 @@ jobs:
         uses: ./.ci-harness/.github/actions/setup-node-env
         with:
           cache-mode: ${{ needs.preflight.outputs.cache_mode }}
-          install-bun: "false"
+          install-bun: "true"
           node-compile-cache: "true"
           node-compile-cache-scope: "build"
           # Same-repo Blacksmith runs restore the dependency cache published by
@@ -1428,6 +1428,11 @@ jobs:
       - name: Smoke test CLI launcher status json
         run: node openclaw.mjs status --json --timeout 1
 
+      - name: Smoke test built CLI with Bun
+        run: |
+          bun openclaw.mjs --help
+          bun openclaw.mjs status --json --timeout 1
+
       # Doctor index proof, singleton smoke, and startup-memory check are
       # independent dist readers; Blacksmith runners have the cores to overlap
       # them, while hosted 4-core runners keep the serial order so the RSS

.github/workflows/install-smoke-reusable.yml

@@ -1449,7 +1449,7 @@ jobs:
             --source-archive-sha256 "$SOURCE_ARCHIVE_SHA256"
 
       - name: Install Bun for global smoke
-        run: npm install -g bun@1.3.14
+        run: npm install -g bun@1.4.0
 
       - name: Run Bun global install candidate-payload smoke
         working-directory: .release-harness