fix(release): treat asset tags as data

Draft
TH
15m ago
+438-78

Summary

Keep release tags as environment data, validate supported SemVer at the existing owner, and serialize manifests with JSON.stringify. Bind validator checkout to the called job's repository/SHA while preserving requested build refs. Preserve Android version codes for build-metadata versions.

Seven files change. Rebased onto main 45e1372f; the SDK conflict preserves upstream's shared setup action and validates metadata before setup. Fixes #4374; part of #4368.

Validation

Head: 7732185f7ffc2647f6fc1577db95d4c655ae57ef.

  • All 42 runnable exact-head checks passed; exactCommit=true, checkoutChanged=false. Full selection retains 25 owned skips. Unit: 18,083 passed/three skipped. Receipt, range comparison and obligations.

  • Frozen install, build, full format and diff checks passed. Release and SDK guard suites: 45 tests passed.

  • Range comparison: seven commits unchanged; one workflow conflict reconciles the upstream SDK owner. Six other touched files are byte-identical to previously reviewed a8411df.

  • Earlier regression/mutation and native APK version evidence stays attributed to its tested SHAs. No new native build, device or Windows run is claimed.

  • Draft blocker: original API36 Android Back/diff failure remains unresolved under #4378. Draft skips do not clear it. Current CI: 13 successful, 13 skipped, one neutral; native smoke and asset lanes skipped. CI. Review/manual obligations remain. No release, upload, tag or workflow dispatch occurred.