fix: harden portal OTA release

.github/workflows/ci.yml

@@ -21,11 +21,13 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: bash -n scripts/*.sh tools/check-ota-partitions.sh tools/portal-hardware tools/lib/*.sh tools/tests/*.sh
+      - run: python3 -m py_compile test/portal-harness/tools/ota_fixture_input.py
       - run: |
           for spec in tests/portal-harness/tests/*.js; do
             node --check "$spec"
           done
       - run: timeout 15s python3 tools/tests/test-capture-serial.py
+      - run: timeout 15s bash tools/tests/test-ota-fixture-identity.sh
       - run: ./tools/check-ota-partitions.sh
       - run: ./scripts/check-docs.sh