fix(ci): fall back to legacy LLM API key secret

[RerankerGuo]

Summary

• Keep the runtime-facing environment variable as AGENTTEAMS_LLM_API_KEY.
• Resolve its value from the new Actions secret first, then fall back to HICLAW_LLM_API_KEY while repository secrets are migrated.
• Apply the same fallback to PR integration tests and release-baseline install/test jobs.

Root cause

The AgentTeams contract rename changed the workflow to read only secrets.AGENTTEAMS_LLM_API_KEY, but the configured repository secret still uses the legacy name. Run #1647 therefore failed eight integration jobs before any test started with LLM API Key is required.

Verification

• Parsed .github/workflows/test-integration.yml with PyYAML.
• Confirmed all three workflow consumers use the fallback expression.
• git diff --check

This unblocks current PR CI, including #985, without exposing or renaming any secret.

[github-actions]

❌ Integration Tests Failed (controller-cr-2 / mgr=copaw / wk=copaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (controller-cr / mgr=copaw / wk=hermes)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (llm-interaction-2 / mgr=openclaw / wk=openclaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (llm-interaction-2 / mgr=copaw / wk=hermes)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (llm-interaction / mgr=openclaw / wk=openclaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (controller-cr / mgr=openclaw / wk=openclaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (controller-cr / mgr=copaw / wk=copaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (llm-interaction-2 / mgr=copaw / wk=copaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (llm-interaction / mgr=copaw / wk=hermes)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[github-actions]

❌ Integration Tests Failed (llm-interaction / mgr=copaw / wk=copaw)

Commit: 05d3dcf
Workflow run: #1655

Test Results

No test output captured.

Debug Log (tail)

No debug logs available.

---

📦 Download full debug logs & test artifacts

[RerankerGuo]

Self-CI bootstrap note: run #1655 uses the pull_request_target workflow definition from current main, so the fallback expression in this branch is not active for its own run. All 9 pre-integration checks passed. I inspected the raw logs for all 10 failed matrix jobs; every job stopped before tests with the identical LLM API Key is required installer error. Once this workflow patch is merged, later PR runs will use the fallback.