fix: gate release through protected approval

[chrisl10]

Outcome

Repairs the PRD-005 publisher after GitHub proved that GITHUB_TOKEN cannot read repository-admin environment settings.

• bumps the unreleased candidate to v1.1.0-codex.2 without rewriting the protected .1 tag
• treats admission to prd005-release as the reviewer proof
• reverifies exact tag and merged-main ancestry after protected approval
• requires the created release to report immutable and pass release/asset verification
• preserves the reviewed product patch and manifest unchanged

Security cycle 13: PASS. Quality cycle 8: PASS.