Trust: restamp gen-0 fingerprint after #23139/#23140 drift (#10533)

[PurHur]

Summary

• Pillar 1: north-star5-verify --fast step 4f-m was red on master (lowering_source_fingerprint mismatch after Stdlib: deny PDO/PDOStatement/PDORow serialize like Zend (#23103) #23139 / Stdlib: deny Sysv*/Shmop serialize like Zend (#23132) #23140).
• Restamped prelinked/bootstrap-gen0/manifest.json + .bootstrap_lowering_source.sha with BOOTSTRAP_GEN0_ALLOW_UNVERIFIED_STAMP=1 (provenance: unverified-restamp).
• Honest verified-fresh rebuild remains blocked on exclusive sidecar refresh (Gen-1+ #1492: committed gen-0 seed cannot be rebuilt — refresh OOMs at 48 GiB, 44 restamps since the blob last changed (script/bootstrap-refresh-gen0-sidecar.sh) #22642); this only unblocks the daily trust gate.

Refs #10533 (strategy; comments locked at 2500+).

Test plan

• php script/check-bootstrap-gen0-manifest-sync.php → OK (6ed67df51afb…)
• make north-star5-verify-fast → OK (pre-rebase; fingerprint gate is the 4f-m check)
• ./script/release-readiness.sh --json → user_release_ready: yes (pre-rebase on equivalent stamp)
• Re-confirm user_release_ready: yes after merge on master

Made with Cursor