Add one-shot vpnruntime CI guard smoke script

docs/operations/VPNRUNTIME_CI_STABILIZATION_CHANGELOG_2026-05-12.md

@@ -43,6 +43,16 @@ and related CI hardening.
   - `agents/rap-node-agent`
   - `backend`
 
+## One-Shot Guard Script
+
+- `scripts/smoke/run-vpnruntime-ci-guards.ps1`
+
+Example:
+
+```powershell
+pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/smoke/run-vpnruntime-ci-guards.ps1
+```
+
 ## Transfer/Recovery Artifacts
 
 Local export files are available in ignored path:
@@ -54,4 +64,3 @@ Local export files are available in ignored path:
 See:
 
 - `docs/operations/VPNRUNTIME_CI_FIXES_TRANSFER_2026-05-12.md`
-