ci: use packaged tarball for docker e2e

scripts/e2e/pi-bundle-mcp-tools-docker.sh

@@ -1,4 +1,6 @@
 #!/usr/bin/env bash
+# Verifies embedded Pi bundle MCP tool materialization and tool-policy behavior
+# inside the package-installed functional E2E image.
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
@@ -16,10 +18,12 @@ trap cleanup EXIT
 docker_e2e_build_or_reuse "$IMAGE_NAME" pi-bundle-mcp-tools
 
 echo "Running in-container Pi bundle MCP tool availability smoke..."
+# Harness files are mounted read-only; the app under test comes from /app/dist.
 set +e
 docker run --rm \
   --name "$CONTAINER_NAME" \
   -e "OPENCLAW_STATE_DIR=/tmp/openclaw-state" \
+  -v "$ROOT_DIR/scripts/e2e:/app/scripts/e2e:ro" \
   "$IMAGE_NAME" \
   bash -lc "set -euo pipefail
     node --import tsx scripts/e2e/pi-bundle-mcp-tools-docker-client.ts