test(conformance): migrate file transfer scenarios (#3597)

Signed-off-by: Evan Lezar <elezar@nvidia.com>

Author: elezar

architecture/build.md

@@ -270,7 +270,9 @@ for explicit publication.
 
 CLI conformance runs after target provisioning and operates only through the
 configured OpenShell CLI. The smoke scenario verifies the black-box sandbox
-lifecycle by creating, inspecting, executing in, and deleting a sandbox.
+lifecycle by creating, inspecting, executing in, and deleting a sandbox. The
+file-transfer scenario verifies portable upload and download behavior, Git-aware
+filtering, and sandbox workspace path safety.
 Feature suites use the same disposable guest but may provision isolated
 dependencies after installation. The Keycloak provider-refresh suite starts a
 guest-local Keycloak realm and verifies a successful OAuth refresh followed by

crates/openshell-conformance/src/lib.rs

@@ -24,8 +24,10 @@ use tokio::time::sleep;
 use self::executor::{CliExecutionError, CliExecutor, ProcessCli};
 
 pub use scenarios::{
-    MECHANISTIC_PROPOSAL_SCENARIO, NEW_HOSTNAME_PROPOSAL_SCENARIO, POLICY_LOCAL_SCENARIO,
-    SANDBOX_LIFECYCLE_SCENARIO, SMOKE_SCENARIO,
+    FILE_TRANSFER_GIT_FILTERING_SCENARIO, FILE_TRANSFER_PATH_SAFETY_SCENARIO,
+    FILE_TRANSFER_ROUND_TRIP_SCENARIO, FILE_TRANSFER_SCENARIO, MECHANISTIC_PROPOSAL_SCENARIO,
+    NEW_HOSTNAME_PROPOSAL_SCENARIO, POLICY_LOCAL_SCENARIO, SANDBOX_LIFECYCLE_SCENARIO,
+    SMOKE_SCENARIO,
 };
 
 /// An installed conformance scenario.
@@ -47,6 +49,7 @@ impl Scenario {
 const SCENARIOS: &[Scenario] = &[
     SMOKE_SCENARIO,
     SANDBOX_LIFECYCLE_SCENARIO,
+    FILE_TRANSFER_SCENARIO,
     MECHANISTIC_PROPOSAL_SCENARIO,
     NEW_HOSTNAME_PROPOSAL_SCENARIO,
     POLICY_LOCAL_SCENARIO,