[masarray]

Final M3.H workflow hygiene

• Remove the old one-time write-enabled Stable promotion workflow after promotion succeeded. It previously could PATCH release #422544367 and set make_latest=true on a later manual invocation. This is a risk to subsequent release promotion and therefore must be retired. Its old commits and successful actions logs stay in Git history.
• Keep read-only immutable release guard introduced in chore(m3h): close historical SMV backlog and guard immutable release/main ancestry #302, but adjust its source equality test from source .. HEAD(main) to source .. release-tag. Later legitimate software development in main must not cause misleading M3.H tag regression failures.
• Preserve source/tag ancestry and immutable asset IDs, byte sizes and SHA-256 validation. No firmware, binaries, CMake, source, assets, release notes or tag changed.
• Update closure ledger to reflect workflow retirement and provenance check.

Merge only after guard and CI routing PASS; use expected SHA merge protection.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-24T08:58:57.433355Z	50b7033	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.