test: expand Crestodian first-run Docker smoke

docs/cli/crestodian.md

@@ -304,6 +304,10 @@ Fresh configless setup through Crestodian is covered by:
 pnpm test:docker:crestodian-first-run
 ```
 
+That lane starts with an empty state dir, routes bare `openclaw` to Crestodian,
+sets the default model, creates an additional agent, configures Discord through
+a token SecretRef, validates config, and checks the audit log.
+
 ## Related
 
 - [CLI reference](/cli)

docs/help/testing.md

@@ -63,6 +63,10 @@ When debugging real providers/models (requires real creds):
   - Runs Crestodian in a configless container with a fake Claude CLI on `PATH`
     and verifies the fuzzy planner fallback translates into an audited typed
     config write.
+- Crestodian first-run Docker smoke: `pnpm test:docker:crestodian-first-run`
+  - Starts from an empty OpenClaw state dir, routes bare `openclaw` to
+    Crestodian, applies setup/model/agent/Discord SecretRef writes, validates
+    config, and verifies audit entries.
 - Moonshot/Kimi cost smoke: with `MOONSHOT_API_KEY` set, run
   `openclaw models list --provider moonshot --json`, then run an isolated
   `openclaw agent --local --session-id live-kimi-cost --message 'Reply exactly: KIMI_LIVE_OK' --thinking off --json`