Record worker CI Docker verification on shared host

docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md

@@ -159,3 +159,27 @@ Verification from a clean detached worktree at corrected `HEAD`:
   targeted anti-flake, race, one-shot guard): PASS
 - corrected published head:
   `a9f79366561d6a9b8edb0956b391b943b6773030`
+
+### 2026-05-12 Worker CI Docker Verification
+
+The worker Docker verification was run on the shared project Docker host, not on
+local Docker Desktop.
+
+Docker endpoint:
+
+```text
+ssh://test-docker
+```
+
+Image tag:
+
+```text
+rap-rdp-worker:ci-verify-main
+```
+
+Verification:
+
+- `docker -H ssh://test-docker build --tag rap-rdp-worker:ci-verify-main --file workers/rdp-worker/Dockerfile workers/rdp-worker`:
+  PASS
+- `docker -H ssh://test-docker run --rm --entrypoint /bin/sh rap-rdp-worker:ci-verify-main -lc "test -x /usr/local/bin/rdp-worker && test -x /usr/local/bin/rdp-worker-dataplane-token-probe && test -x /usr/local/bin/rdp-worker-dataplane-bind-probe"`:
+  PASS