Deploy the data product reliability release

[devantler]

🤖 Generated by the Agentic Engineer

The operational and consumer reliability work in devantler-tech/data-product-controller#283 needs to reach the deployed product so users can benefit from the merged fixes.

Acceptance criteria:

• Publish and verify the signed controller image and chart from the final merged source release.
• Pin the controller, independent sample and UI kit to that same verified release through GitOps.
• Complete protected CI and review, then merge the deployment change.
• Verify reconciliation, ready workloads, public routes and the canonical rollout receipt against the deployed artifacts.
• Exercise the deployed registry and UI kit, including querying the sample and persisted appearance selection.

This rollout preserves existing feature activation choices. It does not establish adoption of an external database.

[devantler]

🤖 Generated by the Agentic Engineer

Rollout PR #4534 merged through the protected queue at 2026-10-06T00:52:00Z. The evaluated head ec718c5 landed as 513cf30.

The deployed trial is v2.4.4, whose source tag resolves to 8b3dd0adb265c6f34b47eb12da8ab7d335de6d29. Its signed image and chart passed the prior exact repository/tag/source verification and published-image smoke proof. The protected production job succeeded at 00:46:20Z. Its canonical receipt is complete: 3 current deployments, 6 healthy current Pods, 3 current routes and 9 public checks. The verifier binds the exact published Apps revision, signed chart, installed release, running image digests, workload ownership and route generations; a green source publication alone was not used as rollout proof.

Post-deployment browser evaluation at 00:55Z passed through both real consumer paths. The authenticated registry opened the separately served Harbour UI and completed its handshake; All stations returned two synthetic rows and Nordhavn one. Light and Dark reached both registry and product, preserving the query; dark appearance persisted after reload. The independently connected portable host passed the same handshake, queries and Light/Dark propagation; its restored System selection persisted after reload. Test preferences were restored and temporary tabs closed.

This completes #4510's rollout and real user-path acceptance. The broader controller delivery #283 remains open: its live child set now includes delivery #331, whose twelve fixes are in draft PR #341 at signed head ce0463c4afb990b40d566ba0b70306d2b9c6b394 and still require fresh hosted CI and review after a test-stability repair. Published v2.4.6/v2.4.7 and those newer twelve fixes are not represented as deployed by this v2.4.4 receipt. All engine/provider, source, composition, publication and contract-probe activation gates retain their existing rollout state.