fix(cd): keep p0 onboarding readiness on controlled profile

ops/runner/test_cd_controlled_runtime_profile.py

@@ -26,6 +26,24 @@ def test_product_manifest_changes_stay_on_controlled_runtime_profile() -> None:
     assert "tests/test_product_awoooi_manifest_standard_api.py" in text
 
 
+def test_p0_onboarding_readiness_sources_stay_on_controlled_runtime_profile() -> None:
+    text = _workflow_text()
+    expected_sources = [
+        "awoooi_gitea_onboarding_warning_step_dashboard.py",
+        "awoooi_gitea_onboarding_warning_step_owner_package.py",
+        "awoooi_gitea_onboarding_warning_step_owner_response_preflight.py",
+        "awoooi_gitea_onboarding_warning_step_template_copy_apply_gate.py",
+        "awoooi_gitea_onboarding_warning_step_template_copy_execution_plan.py",
+        "awoooi_new_product_onboarding_page_model.py",
+        "awoooi_onboarding_reminder_contract.py",
+        "awoooi_onboarding_source_contracts.py",
+        "awoooi_product_onboarding_guard.py",
+    ]
+    for source in expected_sources:
+        assert f"apps/api/src/services/{source})" in text
+        assert f"src/services/{source}" in text
+
+
 def test_controlled_runtime_skips_b5_before_docker_socket_use() -> None:
     text = _workflow_text()
     b5_start = text.index("- name: Integration Tests (B5")