Console (web/api/trigger) pipelines now read $ACTION to pick which
jobs run. Push, MR, tag, and schedule pipelines ignore ACTION and
behave exactly as before. Dropdown options (matched on first word):

  build-test        - build + smoke + e2e + teardown
  build-upload      - build + smoke + s3_upload
  build-test-upload - build + smoke + e2e + teardown + s3_upload
  step-build        - build only
  step-smoke        - build + smoke only
  step-e2e          - build + e2e only

s3_upload changes:
- Auto-runs for *-upload ACTIONs; stays manual on main-branch push
  and tag pipelines so Dan can still Play from the GitLab UI.
- Accepts S3_ACCESS_KEY_ID / S3_SECRET_ACCESS_KEY / S3_SESSION_TOKEN
  (what the console sends), falls back to AWS_* (what the Play
  dialog takes). Fails fast with a clear message if missing.
- Sends --acl public-read on every upload.
- Also uploads a versioned key `quickstart/pov-setup-<VERSION>`
  alongside the fixed `quickstart/pov-setup`, so older builds stay
  downloadable.
- Prints one line per uploaded object exactly in the format the
  console parses:
    [s3_upload]   https://spectro-files.s3.us-east-2.amazonaws.com/<key

>
- Writes out/s3.env with S3_URL + S3_URL_VERSIONED (dotenv).

version.env dotenv on build is preserved (console dashboard rows are
keyed on VERSION).

Co-Authored-By: Claude Opus 4.7 <[email protected]>