[U38] Promote the stable release and present one credential ceremony

[ZempTime]

PRD: #1
Delivery unit: U38
Campaign: C11
Canonical graph: https://github.com/ZempTime/shortbread/blob/246320c73d81e5afdf0490b43a2b02272f40268b/docs/initiatives/2026-07-shortbread-v1/05_delivery_replan/output/2026-07-20-delivery-plan.md
Common unit contract: https://github.com/ZempTime/shortbread/blob/246320c73d81e5afdf0490b43a2b02272f40268b/docs/initiatives/2026-07-shortbread-v1/05_delivery_replan/output/UNIT-CONTRACT.md

• Acceptance umbrella / blockers: GitHub Rehearse release readiness and close the factory loop #17; blocked by U37.
• Outcome: The controller promotes immutable app/CLI artifacts to the stable public release, closes all acceptance umbrellas, consolidates harvest results, and presents one exact Operator ceremony listing account/domain/plan values, safe credential ingress, apply, Owner bootstrap, doctor, and full live smoke.
• Failure/recovery: Artifact drift, missing checksums/compatibility, incomplete issue/evidence state, credentials absent, or unsafe live ingress cannot be called a live deployment. Credential absence truthfully leaves a credential-ready repository and one exact Operator-only command.
• Evidence: Release/tag/package checks, terminal report, redacted setup checklist, optional live provision → deploy → Owner bootstrap → CLI login → publish → invite → view → feedback smoke, and final factory evaluation.
• Central surfaces / impact: Stable release/tag, root RUN/tracker, release notes, credential boundary, factory harvest. Paid/legal/account/domain decisions remain Operator actions.
• Safe split: Stable artifact promotion and optional live smoke are distinct evidence states, but both share one ceremony; missing credentials do not invalidate credential-ready completion.

Every integration records a factory candidate with evidence or No reusable harvest.