fix(recovery): orchestrate 110 harbor local repair

ops/runner/test_cd_controlled_runtime_profile.py

@@ -82,6 +82,10 @@ def test_harbor_login_has_public_route_retry_and_safe_secret_transport() -> None
     assert "BLOCKER harbor_registry_public_route_unavailable" in block
     assert "sudo /usr/local/bin/harbor-watchdog.sh --check" in block
     assert "sudo /usr/local/bin/harbor-watchdog.sh --repair-once" in block
+    assert (
+        "sudo /usr/local/bin/recover-110-control-path-and-harbor-local.sh --apply-all"
+        in block
+    )
     assert "sleep \"${LOGIN_SLEEP_SECONDS}\"" in block
     assert "${HARBOR_PASSWORD}" in block
     assert "--password " not in block
@@ -117,6 +121,17 @@ def test_harbor_watchdog_exposes_controlled_check_and_one_shot_repair() -> None:
     assert "while true" in text
 
 
+def test_deploy_to_110_syncs_local_control_path_recovery_helpers() -> None:
+    text = (ROOT / "scripts/reboot-recovery/deploy-to-110.sh").read_text(
+        encoding="utf-8"
+    )
+
+    assert "repair-110-ssh-publickey-auth-local.sh" in text
+    assert "recover-110-control-path-and-harbor-local.sh" in text
+    assert "/usr/local/bin/repair-110-ssh-publickey-auth-local.sh" in text
+    assert "/usr/local/bin/recover-110-control-path-and-harbor-local.sh" in text
+
+
 def test_onboarding_warning_step_template_stays_on_controlled_runtime_profile() -> None:
     text = _workflow_text()
     assert "onboarding warning-step workflow is" in text