epic: release engineering and upgrade safety

[TheNewAutonomy]

Parent

• mainnet: launch readiness program tracker #260

Goal

Make releases reproducible and upgrades safe/operationally predictable.

Exit criteria

• Reproducible build artifacts with provenance/checksums.
• Upgrade compatibility policy and tests in place.
• Rollback process validated.