ci: converge scheduling-kit package lane (TIN-3092)

[Jess Sullivan (Jesssullivan)]

Summary

• keep package and Bzlmod version at 0.11.1
• move Bazel from 8.1.1 to 8.2.1
• pin the Tinyland registry to c5986e30831b5fc4f2ed0b70982089b2d15b1c37
• pin the GF caller to signed ci-templates candidate a929a9c7451a6213c7535e6d57a231a279463c00 from feat(ci): add opt-in Bzlmod lock contract ci-templates#147
• remove the hosted publish exception
• preserve the PostgreSQL concurrency proof on the GF runner using the locked Nix flake

Two-pass remote lock contract

This repository has no committed MODULE.bazel.lock, so the bootstrap pass enables only emit_bzlmod_lock_artifact. Enabling verify_bzlmod_lock now would reject the newly generated untracked lock before upload. After GF produces the bzlmod-lock artifact, review and commit it in a signed follow-up, then enable verify_bzlmod_lock for the enforcement pass.

Remote-only gates

• GF package resolver and both validation jobs complete on identified tinyland-nix runners
• cache-backed steps prove shared-cache attachment and no remote executor
• GF PostgreSQL concurrency proof completes
• download and review the GF bzlmod-lock artifact
• commit MODULE.bazel.lock in a signed follow-up and enable verify_bzlmod_lock

No Bazel, Bazelisk, Nix, build, test, or server command was run locally. This PR does not publish, tag, release, or change package APIs.

[Jess Sullivan (Jesssullivan)]

Closing—not merging—as superseded. This draft is dirty/conflicting and couples the old v3/provider-shaped package workflow, direct pnpm/Nix PostgreSQL lane, and the PR #147 two-pass lock bootstrap. The lock contract is now preserved inside ci-templates v4 PR #149; scheduling-kit canonical-coordinate work remains in draft PR #125, and the clean 0.11.2 version-only candidate remains in draft PR #123 after the v4 gate. No branch is deleted and the commits remain recoverable; any still-needed Bazel 8.2.1/toolchain delta must be re-derived narrowly through the v4 consumer migration rather than reviving this false lane. TIN-3092 is already satisfied by its immutable BCR and clean-harness receipts; remaining work is TIN-89/TIN-4152/TIN-4150.

[linear-code]

TIN-3092