feat(canopy): worklist-driven restore-replicas integration

.github/workflows/cd.yml

@@ -71,14 +71,17 @@ jobs:
           key: ${{ matrix.arch }}-release
 
       - name: Build binaries
-        run: cargo build --locked --target ${{ matrix.target }} --release --bin operator
+        run: |
+          cargo build --locked --target ${{ matrix.target }} --release \
+            --bin operator --bin canopy-proxy
         env:
           RUSTFLAGS: "-C target-feature=+crt-static"
 
       - name: Prepare artifacts
         run: |
           mkdir -p artifacts/${{ matrix.arch }}
           cp target/${{ matrix.target }}/release/operator artifacts/${{ matrix.arch }}/
+          cp target/${{ matrix.target }}/release/canopy-proxy artifacts/${{ matrix.arch }}/
 
       - uses: actions/upload-artifact@v7
         with:

.github/workflows/integration.yml

@@ -56,6 +56,14 @@ jobs:
               test-ps-all-missing
             needs_non_pg_snapshot: false
 
+          # canopy_integration is a scaffold in tests/canopy_integration.rs
+          # but no stub-canopy HTTP server exists yet, so the happy-path
+          # test times out. Re-add this matrix entry when the stub lands:
+          #   - name: canopy_integration
+          #     namespaces: >-
+          #       test-canopy-restore
+          #     needs_non_pg_snapshot: false
+
     steps:
       - uses: actions/checkout@v6.0.2