ci: migrate 2 of 9 ci jobs to smithy self-hosted runners

.github/workflows/ci.yml

@@ -15,6 +15,7 @@ jobs:
   # Basic loading verification (fast, no nix required)
   verify-rules:
     name: Verify Rules Load
+    # Stays on ubuntu-latest: uses bazelbuild/setup-bazelisk; Bazel is not pre-installed on smithy.
     runs-on: ubuntu-latest
 
     steps:
@@ -42,6 +43,7 @@ jobs:
   # Full build with nix toolchain (Linux)
   build:
     name: Build Example (Linux)
+    # Stays on ubuntu-latest: needs Nix + Bazel + Rocq toolchain, none of which are on smithy.
     runs-on: ubuntu-latest
     permissions:
       id-token: write
@@ -122,6 +124,7 @@ jobs:
   # macOS build
   build-macos:
     name: Build Example (macOS)
+    # Stays on macos-latest: smithy fleet is Linux-only.
     runs-on: macos-latest
     permissions:
       id-token: write
@@ -175,7 +178,7 @@ jobs:
   # Buildifier check
   buildifier:
     name: Buildifier Check
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, light]
 
     steps:
     - name: Checkout repository

.github/workflows/ci_comprehensive.yml

@@ -11,6 +11,7 @@ jobs:
   # Multi-platform verification
   verify-multiplatform:
     name: Verify Rules (${{ matrix.os }})
+    # Stays on hosted: needs Bazel (not on smithy) and macOS in matrix (smithy is Linux-only).
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false

.github/workflows/docs.yml

@@ -16,7 +16,7 @@ on:
 jobs:
   docs:
     name: Documentation Check
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, light]
 
     steps:
     - name: Checkout

.github/workflows/publish.yml

@@ -12,6 +12,7 @@ on:
 
 jobs:
   publish:
+    # Stays on hosted: reusable workflow from bazel-contrib pins its own runner; not callable to smithy.
     uses: bazel-contrib/publish-to-bcr/.github/workflows/publish.yaml@v1.1.0
     with:
       tag_name: ${{ github.event.release.tag_name || inputs.tag_name }}

.github/workflows/quick_test.yml

@@ -10,6 +10,7 @@ on:
 jobs:
   quick-test:
     name: Quick Test
+    # Stays on ubuntu-latest: uses bazelbuild/setup-bazelisk and runs bazel; Bazel not on smithy.
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/release.yml

@@ -9,6 +9,7 @@ on:
 jobs:
   release:
     name: Create Release
+    # Stays on ubuntu-latest: build step runs `bazel build`; Bazel not on smithy.
     runs-on: ubuntu-latest
 
     steps: