2.33.9

• cd9c763: Use optional layered GitHub credentials, isolated Hello World and integration fixtures, workflow approval with act fallback, release-aware matrix scheduling, complete dependency freshness checks, and workspace prerequisite grants for task sidecars. Stop owned Formal AI servers before exit and terminate the Codex shell when its repeated-call breaker fires. Require every Hello World matrix row to pass before recording a Formal AI release as tested, and enable the opt-in repeated-tool-call breaker for matrix rows. Report fixture branches retained by repository deletion rules separately from integration failures and preserve cleanup evidence in CI artifacts.

Related Pull Request: #2329

---