fix: preserve user-facing fixes in release automation

[loonghao]

Summary

• validate pull request titles against the Conventional Commit types used by Release Please
• run only trusted base-branch code and publish a PR Title status on the pull request head
• refresh workspace-hack metadata required by the repository pre-push hook
• restore release eligibility after the non-Conventional squash title used for Fix nested Windows PATH inheritance #1073

Validation

• vx python -m unittest discover -s scripts/tests -p 'test_*pr_title*.py'
• vx uvx:ruff check scripts/validate_pr_title.py scripts/tests/test_validate_pr_title.py scripts/tests/test_pr_title_workflow.py
• vx actionlint .github/workflows/pr-title.yml
• vx just hakari-verify
• vx git diff origin/main...HEAD --check