Add isolation regressions and nightly profile checks

[jsugg]

Summary

• add regression coverage so isolated runtime keys cannot be overridden by legacy/local varlock env values in compose execution and fresh-host compose probes
• add nightly all-profile rendering via tests/scripts/compatibility_matrix.py assert-openclaw-profiles
• add a dedicated clawops memory migration dry-run check to memory-plugin-verification.yml via tests/scripts/memory_plugin_verification.py run-clawops-memory-migration
• expand CI workflow contract and unit tests for the new script commands and helper paths