Extend the verify job with a second step running cloud tests, so CI covers both suites (host 27 + cloud 223, both passing locally outside the model sandbox; the 40 socket failures reported inside the sandbox were sandbox artifacts, not code failures). Generator (host.py HOST_VERIFY_WORKFLOW) and generated workflow were updated together; template matches the generated file.