ci(fleet): pin shared validation policy

[JSONbored]

Summary

• Re-pins this repo's thin AIO workflow callers to the latest aio-fleet validation-policy release.

What changed

• Updates build, upstream-check, release, and publish workflow callers to JSONbored/aio-fleet@ba033c4af5d16e7fcb4962f77e527eb5d86782fa
• Keeps repo-specific workflow inputs unchanged

Why

• Enables the new centralized fleet policy validators from aio-fleet
• Keeps workflow drift, pinned-action checks, catalog metadata checks, and publish-platform policy in the control plane

Validation

• Generated with aio-fleet sync-workflows
• aio-fleet verify-caller passed locally
• aio-fleet validate-repo passed locally
• git diff --check passed locally

Notes

• This is workflow-only and should not publish images or sync Community Apps XML.
• GitHub may require allowlisting the new pinned reusable workflow SHA before checks run.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.