feat: WP-0005 adoption polish — doc sync, fleet parity, CI lint

- Add make agents-sync-package and release-check parity gate
- Add tests/test_packaged_agents_parity.py; sync packaged agents with agents/
- Update install docs (HELLO_WORLD, CLI_CHEAT_SHEET, AGENT_DISTRIBUTION)
- Expand PACKAGE_RELEASE.md secrets setup and pre-tag checklist
- Add flake8 to Gitea CI; CHANGELOG Unreleased for v1.2.0
- Expand INTEGRATION_PATTERNS activity-core handoff checklist

docs/PACKAGE_RELEASE.md

@@ -54,13 +54,39 @@ Consumer simple index:
 https://gitea.coulomb.social/api/packages/coulomb/pypi/simple/
 ```
 
+## Gitea repository secrets (one-time)
+
+Configure in Gitea: **Repository → Settings → Actions → Secrets**.
+
+| Secret | Value |
+|--------|-------|
+| `GITEA_PACKAGE_USER` | Gitea username with package upload permission (e.g. `tegwick`) |
+| `GITEA_PACKAGE_TOKEN` | Gitea API token with `write:package` scope |
+
+The publish workflow fails at the upload step when either secret is missing or
+invalid. Do not commit tokens to the repository.
+
+Verify secrets without cutting a release:
+
+1. Open **Actions → Publish Python package → Run workflow** (`workflow_dispatch`)
+2. Confirm the run completes and `twine upload` succeeds
+3. Optional: `pip install kaizen-agentic==<version> --extra-index-url ...`
+
+## Pre-tag release checklist
+
+Before `git tag vX.Y.Z && git push origin vX.Y.Z`:
+
+- [ ] `make release-check` passes (tests, flake8, version consistency, agent parity)
+- [ ] `make package-check` builds and validates `dist/*`
+- [ ] `CHANGELOG.md` has a dated `[X.Y.Z]` section matching `pyproject.toml`
+- [ ] `GITEA_PACKAGE_USER` and `GITEA_PACKAGE_TOKEN` secrets are set
+- [ ] Publish workflow smoke-tested via `workflow_dispatch` (or prior tag release)
+- [ ] `make agents-sync-package` run if `agents/` changed since last release
+
 ## Gitea Actions Release
 
 The `.gitea/workflows/publish-python-package.yml` workflow publishes on tags
-matching `v*`. Configure these repository secrets before cutting a release:
-
-- `GITEA_PACKAGE_USER`
-- `GITEA_PACKAGE_TOKEN`
+matching `v*`.
 
 Example: