[zackpratamaa]

Problem

Release jobs could consume artifacts without one exact manifest binding every published file to the source commit and workflow run that produced it.

Fix

• build an exact release-bound/ artifact set
• bind root/native tarballs, SBOM, self-evidence, and checksums in a SHA-256 manifest
• validate source SHA, workflow run ID, version, file set/order, sizes, hashes, package metadata, native binaries, optional dependencies, and evidence checksum
• require the same bound set for dry-run, registry publication, and GitHub release assets

Regression coverage

• valid complete binding
• mutation after manifest creation is rejected
• mismatched source/run provenance is rejected

Local lint, build, full tests, tarball binding tests, and diff check passed. No release approval or publishing guard was weakened.