Add manual acceptance workflow

Author: IlyaasK

.github/workflows/acceptance.yml

@@ -0,0 +1,48 @@
+name: Acceptance
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: acceptance-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  browser-pool:
+    name: Browser pool acceptance
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    env:
+      TF_ACC: "1"
+      KERNEL_ACC: "1"
+      KERNEL_API_KEY: ${{ secrets.KERNEL_API_KEY }}
+      KERNEL_PROJECT_ID: ${{ secrets.KERNEL_PROJECT_ID }}
+      KERNEL_ALT_PROJECT_ID: ${{ secrets.KERNEL_ALT_PROJECT_ID }}
+      KERNEL_BASE_URL: ${{ secrets.KERNEL_BASE_URL }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Set up Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: go.mod
+          cache: true
+
+      - name: Set up Terraform
+        uses: hashicorp/setup-terraform@v4
+        with:
+          terraform_version: "1.15.5"
+          terraform_wrapper: false
+
+      - name: Check required secrets
+        run: |
+          : "${KERNEL_API_KEY:?Set the KERNEL_API_KEY repository secret before running acceptance tests.}"
+          : "${KERNEL_PROJECT_ID:?Set the KERNEL_PROJECT_ID repository secret before running acceptance tests.}"
+
+      - name: Run browser pool acceptance tests
+        run: go test -count=1 -timeout=30m -v ./internal/resources/browserpool -run TestAcc

docs/release.md

@@ -12,7 +12,8 @@ Use this checklist before publishing a Kernel Terraform provider version.
 - Run `go test -short -timeout=2m ./...`.
 - Run `go vet ./...`.
 - Run opt-in acceptance tests with real credentials before the first public v0 release:
-  - `TF_ACC=1 KERNEL_ACC=1 KERNEL_API_KEY=... KERNEL_PROJECT_ID=... go test ./internal/resources/browserpool -run TestAcc`
+  - `TF_ACC=1 KERNEL_ACC=1 KERNEL_API_KEY=... KERNEL_PROJECT_ID=... go test -count=1 -timeout=30m -v ./internal/resources/browserpool -run TestAcc`
+  - or run the manual `Acceptance` GitHub Actions workflow with `KERNEL_API_KEY` and `KERNEL_PROJECT_ID` repository secrets configured.
 - Verify unscoped API calls send no `X-Kernel-Project-Id` header; it is sent only when a resource-level `project_id` or the provider default resolves a project.
 - Confirm `terraform-registry-manifest.json` contains protocol `["6.0"]` for Terraform Plugin Framework.
 - Confirm there is no branch named like the release tag, for example `v0.1.0`.