Harden Lighthouse release control and reconcile Cloudflare infrastructure

[truegoodcraft]

Summary

• Records the verified Lighthouse 1.29.3 Cloudflare promotion and reconciles repository-controlled release authority.
• Pins the verified Cloudflare account and primary D1 metadata while advancing the synchronized bundle to 1.29.4.
• Makes the production workflow manual-only, main-only, serialized, validation-gated, strict, variable-preserving, and receipted.
• Records the separately approved Workers Builds production-command repair from deploy to versions upload and its durable dashboard readback.
• Adds deterministic release-control tests and a rollback-safe operator procedure.

Validation

• Typecheck passed.
• Full test suite passed: 167 of 167.
• Release-control tests passed: 4 of 4.
• Diff hygiene passed.

Operational boundary

• Publishing this branch can create external Worker version and preview state.
• No production deployment, migration, secret, domain, binding, or Worker runtime change was invoked.
• The GitHub production workflow token availability and scope remain unverified; production dispatch requires separate explicit approval.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	buscore-lighthouse	ee420b0	Commit Preview URL Branch Preview URL	Aug 27 2026, 12:38 AM