fix(release): gate tarballs on version sync

[namastex888]

Summary\n- Synchronize the native Orca manifest with the current package release version.\n- Verify committed release metadata once before the four-platform tarball matrix starts.\n- Cover the workflow gate with a focused release-payload regression test.\n\n## Validation\n- 57 focused release/version tests, source verification, TypeScript, targeted Biome, and diff check passed.\n- Independent review: SHIP; 8 release-payload tests, 80 adjacent release workflow/guard tests, and source verification passed.\n- Full bun run check completed with 3449 passing, 1 skipped, and 18 pre-existing unrelated fixture/integration failures outside this three-file diff; attached CI is the merge gate.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 86afd9bd-94ab-463e-80e4-9f2601694289

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-29T21:27:53.992943Z	513c8e2	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.