HIVE-REL-003: correct publisher host workspace preparation #118

Problem

Release Publisher run 35326992019 failed closed before tag creation during scripts/integration_health.py.

Observed evidence:

• metadata verification PASS;
• deterministic validation PASS;
• services started healthy;
• integration failed in WO-020 with PermissionError(13, 'Permission denied');
• no v1.0.0 tag exists;
• no v1.0.0 GitHub Release exists.

Root cause: unlike the canonical CI integration job, Release Publisher did not pre-create .hive-projects on the host before docker compose up. Docker therefore created/bound the workspace with incompatible ownership, and the smoke integration could not clean its fixtures.

Objective

Make Release Publisher prepare the host project workspace exactly like canonical CI before starting services, while preserving all existing fail-closed publication gates.

Authorized base

0f86be943f13e7058419c4ff282cf801b9ad46a6

Scope

Only:

• Release Publisher workflow correction;
• v1.0.0 publish-request rebinding to this exact authorized parent/work order;
• Review Evidence registration/tests needed for HIVE-REL-003.

No product code, dependencies, migrations, Project Brain, release assets, tag or release mutation.

Stop condition

STOP before merge. Sol exact-head audit and ADR-019 SQUASH only.