What changed

• hardens production dependency, runtime pin, GitHub Actions, and repository governance policy
• adds production metrics, smoke profiles, notifications, and serialized deployment controls
• establishes authoritative test and coverage gates for API, Web, core, and operations code
• publishes the current 2,031-file region-data release as immutable content-addressed R2 objects
• adds verified public R2 synchronization to CI, visual QA, and API deployment while retaining Git-backed data for the Phase A shadow gate
• changes API dataset detection to compare verified old/new release manifests by logical file hash

R2 Phase A boundary

This PR intentionally keeps packages/geoint/region-dist and packages/geoint/region-db tracked in Git. CI and deployment now replace/verify those copies from the committed R2 release pointer before any data consumer runs. Git-tree deletion is a separate Phase B pull request and will not begin until this PR has green PR CI, green merged-main CI, successful deployments, and full production smoke evidence.

The initial release was published idempotently and verified twice from empty shadow directories:

• logical entries: 2,031
• region-dist: 901
• region-db: 1,130
• uncompressed bytes: 8,971,117,492
• immutable gzip objects: 1,044

Validation

• Node 22 root operational suite: 320/320 tests pass
• focused manifest detector and workflow contracts: 21/21 tests pass
• full data audits, core tests, standalone package test, API tests, and Web tests pass
• coverage policy passes: core 73.37% branch, API 72.52%, Web 59.59%, operations 87.82%
• full monorepo build passes
• public R2 re-sync: 2,031/2,031 files skipped as hash-valid, zero download bytes
• initial pointer transition from the previous Git-backed commit returns an empty changed-dataset set as expected

The current verify check for the PR head remains the merge gate.