ci: verify clean RC2 group recovery fixes

.github/workflows/rc2-group-fault.yml

@@ -0,0 +1,66 @@
+name: RC2 hosted classic revocation deadline check
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  classic-revocation-deadline:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803
+        with:
+          ref: 508ada91114a8004087b75ae2e724d84a77d7424
+          path: testlab
+          persist-credentials: false
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803
+        with:
+          repository: kafkars/kafkars
+          ref: aa05bddebd411021fd39fed33e60aa61d2e54455
+          path: kafkars-candidate
+          persist-credentials: false
+      - name: Select the unchanged classic recovery scenario
+        run: |
+          test "$(git -C kafkars-candidate rev-parse HEAD)" = "aa05bddebd411021fd39fed33e60aa61d2e54455"
+          test "$(git -C testlab rev-parse HEAD)" = "508ada91114a8004087b75ae2e724d84a77d7424"
+          python3 - <<'PY'
+          from pathlib import Path
+          Path("SOURCE-CHECK-ONLY.txt").write_text(
+              "NOT RELEASE EVIDENCE: clean native candidate "
+              "aa05bddebd411021fd39fed33e60aa61d2e54455 with Testlab "
+              "508ada91114a8004087b75ae2e724d84a77d7424. This focused check does not "
+              "replace exact-merge code CI or the complete 12-cell release aggregate.\n"
+          )
+          Path("testlab/packs/rc2-classic-revocation-deadline.toml").write_text('''schema_version = 1
+          id = "rc2-classic-revocation-deadline"
+          title = "RC2 classic revocation deadline source check"
+          scenarios = ["scenarios/kafka/classic-group-session-recovery.toml"]
+          ''')
+          Path("testlab/qualifications/kafkars-pr.toml").write_text('''schema_version = 2
+          id = "rc2-classic-revocation-deadline"
+          title = "RC2 classic revocation deadline source check"
+          [[cells]]
+          id = "apache-kafka-4-3-1-three-scram-sha-512"
+          environment = "clusters/apache-kafka/4.3.1/three-scram-sha-512.toml"
+          pack = "packs/rc2-classic-revocation-deadline.toml"
+          attempts = 5
+          gating = true
+          ''')
+          PY
+          git -C testlab diff > focused-harness.patch
+      - uses: ./testlab
+        with:
+          kafkars-path: kafkars-candidate
+          evidence-directory: rc2-classic-revocation-deadline-evidence
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
+        if: ${{ always() }}
+        with:
+          name: rc2-classic-revocation-deadline-source-check
+          path: |
+            rc2-classic-revocation-deadline-evidence
+            SOURCE-CHECK-ONLY.txt
+            focused-harness.patch
+          if-no-files-found: error