v3.17.28

Commits since CHANGELOG generation

bf3d56c chore(release): bump version to 3.17.28 (#23975)
4380f43 fix: reuse ruleset data in posture checks (#23974)
91cedf6 fix: harden review source PR extraction (#23973)
1b069a8 GH#23962: clarify headless canary expectation (#23972)
cb9bef0 wip: avoid state normalization forks (#23971)
37cd700 wip: support partial parent closeout followups (#23970)
8f42b3c wip: address ai research review followup (#23969)
cd69308 chore: update simplification state registry