Extend release manifest schema

[jmcte]

Summary

• Extend the release manifest schema for changelog, version, artifact, and publish configuration
• Normalize backward-compatible defaults for new release automation fields
• Add typed release config surfaces and manifest coverage

Governing Issue

Closes #21

Validation

• npm test -- tests/manifest.test.ts passed
• npm run check passed
• Required PR checks are expected to satisfy CI Gate

Bootstrap Governance

• Changes are scoped to the linked issue
• Contributor or PR guidance changes are reflected in CONTRIBUTING.md, .github/PULL_REQUEST_TEMPLATE.md, and docs/bootstrap/onboarding.md when applicable
• Auto-merge is enabled, or GitHub plan-limit evidence is recorded and the fallback merge-readiness policy applies
• No real secrets, runtime auth, or machine-local env files are committed

Merge Automation

• Auto-merge is enabled

Risk

Low. This only expands manifest parsing, normalization, and types; rendered workflows and release behavior are unchanged.

Notes

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0e04e03976

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[athena-omt]

Static review of the release manifest schema changes looks coherent: the new release/changelog/version/artifact/publish surfaces are normalized with backward-compatible defaults, typed, and covered by manifest/render tests. I did not find a substantive code-level blocker.

I’m leaving this as a comment rather than approving because the live PR is still blocked by required CI: Validate PR Description and CI Gate are failing. The current PR body has the governing issue, but it does not include the required author auto-merge evidence/unavailable-reason statement enforced by the generated PR validation workflow.

Verification note: I attempted the stated local checks on the Athena worktree, but this worker checkout does not currently have dependencies installed, so npm test -- tests/manifest.test.ts and npm run check could not execute (vitest/tsc exit 127 from missing node_modules).

[pheidon]

Approved. I reviewed the release manifest schema/type/test changes and found them scoped and backward-compatible.

Local validation in a clean temp checkout:

• npm test -- tests/manifest.test.ts ✅
• npm run check ✅
• npm run build ✅

Live required checks are also passing now (CI Gate, PR description validation, secrets validation, AI attestation).