Integration test coverage gaps and recommended actions

[Mossaka]

Context

After a comprehensive audit of all integration tests, CI workflows, and smoke tests (see docs/INTEGRATION-TESTS.md and the detailed analysis in docs/test-analysis/), the following critical gaps were identified.

Sub-Issues

#	Issue	Priority	Status
1	#1040 — CI workflow for non-chroot integration tests	P0	Open
2	#1041 — --block-domains integration tests	P1	Open
3	#1042 — --env-all integration tests	P1	Open
4	#1043 — DNS restriction enforcement tests	P1	Open
5	#1044 — Package installation integration tests	P2	Open
6	#1045 — Git push with authentication tests	P2	Open
7	#1046 — Fix docker-warning tests and fragile timing	P2/P3	Open

Note: SSL Bump integration tests (#10 in original list) and localhost HTTP request tests (#7) are deferred — they require more architectural investigation.

Original Analysis

See the detailed gap analysis in the sub-issues above, or refer to:

• docs/INTEGRATION-TESTS.md
• PR docs: add integration test coverage guide with gap analysis #1036 — Coverage guide and detailed analysis documents