v0.1.0-alpha.259

What's Changed

• fix(#1934): pin split fan-out verification and checkouts to the tagged SHA by @jonesrussell in #1936
• fix(#1934): prefer RELEASE_PAT over the bot token for auto-merge merges and admin-dist pushes by @jonesrussell in #1937
• ci(#1934): convert auto-merge to native GitHub auto-merge by @jonesrussell in #1939
• fix(#1940): kernel-services bus binds EntityAccessGate as the GateInterface (G-014) by @jonesrussell in #1941
• fix(#1940): kernel-services bus resolves the dispatcher under PSR-14 and foundation FQCNs (G-025) by @jonesrussell in #1942
• fix(#1940): thread bundle from MigrationDefinition through the runner into DestinationRecord (G-015) by @jonesrussell in #1943
• feat(#1940): first-class least-privilege MigrationSystemAccount for production imports (G-023) by @jonesrussell in #1944
• fix(#1940): MigrationRegistry builds definitions lazily on first query (G-024) by @jonesrussell in #1945
• fix(#1940): bind EntityDestinationFactory; truth-up import-account and bus-precedence docs (adversarial follow-ups) by @jonesrussell in #1947
• fix(#1934): chain-dispatch main CI after bot-token merges; abandon RELEASE_PAT by @jonesrussell in #1948
• feat(#1940): first-class slug field on taxonomy Term (G-019) by @jonesrussell in #1949
• fix(#1940): datetime_immutable cast tolerates null domain values (G-028) by @jonesrussell in #1950

Full Changelog: v0.1.0-alpha.258...v0.1.0-alpha.259