Roll out release automation across managed repos

[jmcte]

Goal

Roll the release automation contract out across bootstrap-managed repos safely.

Scope

• Inventory repos using bootstrap-managed release files.
• Move consumers from refs/heads/main workflow refs to a stable bootstrap tag or immutable SHA.
• Open one PR per repo for rendered release automation updates.
• Keep repo-specific artifact publishing opt-in.

Acceptance criteria

• Downstream repos have release automation generated from project.bootstrap.yaml.
• Each repo documents its release artifacts and publish behavior.
• Consumer workflow refs are pinned to the stable bootstrap release channel.
• Rollout status is tracked repo by repo.