Trust: restamp gen-0 fingerprint after #23025/#23026 drift (#10533)

[PurHur]

Summary

• Pillar 1 red: north-star5-verify --fast step 4f-m — manifest a2ac928a… vs live 863746ae… after Stdlib: uuid parse/unparse/compare/type/mac surface (#22228) #23025 (uuid) + Stdlib: namespaced children() property matches local name (#22829) #23026 (SimpleXML children).
• Restamp lowering_source_fingerprint + .bootstrap_lowering_source.sha only (no driver rebuild).
• Does not close Gen-1+ #1492: committed gen-0 seed cannot be rebuilt — refresh OOMs at 48 GiB, 44 restamps since the blob last changed (script/bootstrap-refresh-gen0-sidecar.sh) #22642 — honest verified-fresh gen-0 still required (IncludeBinding null-op fixed in Bootstrap: skip null include-binding ASSIGN operands (#22642) #22974; Zend auto-select landed in Bootstrap: auto-select the Zend seed path when no driver matches (#22642) #23016).

Test plan

• php script/check-bootstrap-gen0-manifest-sync.php → OK (863746ae5abf…)
• make north-star5-verify-fast → OK (fast)
• ./script/release-readiness.sh --json → user_release_ready: yes (if no newer drift)

Made with Cursor

[PurHur]

Verification (host; Docker lock held by peer helloworld on this worktree)

php script/check-bootstrap-gen0-manifest-sync.php
# OK … lowering_source_fingerprint=863746ae5abf…

./script/north-star5-verify.sh --fast
# north-star5-verify: step 4f-m ok
# north-star5-verify: OK (fast — use --strict before merging bootstrap/M5 work)

Restamp only — does not close #22642.