ci: add gated provenance-emitting release workflow - #17

Open

yakimoto wants to merge 3 commits into

mainfrom

ci/release-provenance-workflow

Commits on Aug 5, 2026

ci: add gated provenance-emitting release workflow (path only, not wired to a tag push)
yakimoto
committed
07b5ef5
fix(release): build+scan before publish, scope publish-job npm ci, assert wave bin, fix version-floor NaN gap
yakimoto
committed
d95fbd3
fix(release): scan build output with repo gitleaks config, cover publish jobs own build too
yakimoto
committed
64cb6b3