Define the selected-surface acceptance gate

[IlyaasK]

Summary

Defines the live-API release gate for the provider's selected public surface.

• Covers the two registered resources: kernel_project and kernel_browser_pool.
• Covers the four registered data sources: kernel_project, kernel_profile, kernel_proxy, and kernel_extension.
• Records the exact scenario each package proves and the six matching local commands.
• Makes the manual acceptance workflow and release-run record the pre-tag evidence.
• Updates README, architecture, and release documentation to use the matrix as the source of truth.

Why this is release work

The selected public surface needs real-API evidence against the release commit. This PR documents that gate without expanding the provider into parked resources or runtime operations.

Provider behavior

No provider behavior, schema, state, import, API, or SDK contract changes.

Acceptance status

All six registered surfaces have opt-in acceptance-test code and matching manual workflow jobs. This documentation PR did not run the credential-gated live matrix; one complete run against the final release commit remains a manual pre-tag gate.

Tests run

• gofmt -l cmd internal
• go test -short -timeout=2m ./...
• go vet ./...
• terraform fmt -check -recursive examples
• bash scripts/check-docs.sh
• bash scripts/check-markdown-links.sh
• bash scripts/check-examples.sh
• git diff --check

Intentionally unsupported

• No browser-pool data source.
• No profile, proxy, extension, deployment, app, or API-key resources.
• No browser/session runtime operations, app invocation, logs, screenshots, live view, force release, or recovery.

Remaining release gate

Run the manual six-package acceptance workflow against the final release commit, record the workflow evidence, and audit any interrupted-run fixtures before tagging.

---

Note

Low Risk
Markdown-only release and testing documentation with no runtime or provider changes.

Overview
Documentation-only: no provider code, schema, or API behavior changes.

Introduces docs/acceptance.md as the canonical selected-surface acceptance matrix for pre-tag releases: gate rules, env vars, a table of live scenarios for two resources and four data sources, six go test commands, scope boundaries, and a release-record template.

README drops inline acceptance commands and directs readers to that matrix; it also notes data-source tests need KERNEL_PROJECT_ID and clarifies tests do not acquire, release, or recover browsers.

docs/architecture.md links acceptance coverage to the matrix. docs/release.md replaces per-package bullet commands with a single matrix run (six manual workflow jobs), and expands interrupted-run cleanup to profiles, proxies, and extensions—not only projects and browser pools.

^{Reviewed by Cursor Bugbot for commit e24b30a. Bugbot is set up for automated code reviews on this repo. Configure here.}