Harden live Iroh integration paths

docs/roadmap.md

@@ -269,8 +269,11 @@ control, local CAS, service installation, and written architecture decisions.
   Acceptance criteria:
   - `[x]` CI runs formatting, clippy, docs, check, and deterministic workspace
     tests on Linux, macOS, and Windows.
-  - `[x]` Iroh-heavy daemon-to-daemon tests are represented by a visible
-    network integration job instead of blocking deterministic platform coverage.
+  - `[x]` Cross-platform jobs keep `GETH_TEST_SKIP_IROH=1` for deterministic
+    host-networking behavior.
+  - `[x]` Ubuntu CI has a required Iroh integration job covering live
+    daemon-to-daemon bootstrap, peer control, sync, native modules, pipe
+    forwarding, SSH proxy handshakes, and overlay ALPN authorization.
   - `[x]` RustSec advisory scanning runs on pull requests, pushes, manual
     dispatch, and a weekly schedule.
   - `[x]` CodeQL and dependency review workflows are present for GitHub-native