fix(release): drop dangling docs artifacts and enforce manifest schema

.github/workflows/helm-ci.yaml

@@ -131,6 +131,14 @@ jobs:
             grep -q 'registry.customer.example/eqtylab/guardian-console' /tmp/repository-prefix-override.yaml
           fi
 
+      - name: Validate release manifests against schema
+        run: |
+          python3 -m venv /tmp/schema-venv
+          /tmp/schema-venv/bin/pip install --quiet check-jsonschema
+          /tmp/schema-venv/bin/check-jsonschema \
+            --schemafile schemas/release-manifest.schema.json \
+            releases/v*/release-manifest.yaml
+
       - name: Validate release manifests
         run: |
           shopt -s nullglob

.github/workflows/release-platform-package.yaml

@@ -385,7 +385,6 @@ jobs:
           ### Artifacts
 
           - Connected package: \`governance-platform-v${VERSION}.tar.gz\`
-          - Documentation snapshot: \`docs-v${VERSION}.tar.gz\` (also included in the package under \`docs/\`; works offline)
           - Release manifest: \`release-manifest.yaml\`
           - Chart digests: \`chart-digests.yaml\`
           - Runtime image tags: \`${VERSION}\`
@@ -414,11 +413,6 @@ jobs:
             assets+=("dist/governance-platform-v${VERSION}-airgap.tar.gz.sha256")
           fi
 
-          if [ -f "dist/docs/docs-v${VERSION}.tar.gz" ]; then
-            assets+=("dist/docs/docs-v${VERSION}.tar.gz")
-            assets+=("dist/docs/docs-v${VERSION}.tar.gz.sha256")
-          fi
-
           flags=()
           if [ "$PRERELEASE" = "true" ]; then
             flags+=(--prerelease)

schemas/release-manifest.schema.json

@@ -77,7 +77,8 @@
         "url": { "type": "string" },
         "sourceRepository": { "type": "string" },
         "sourceCommit": { "type": "string" },
-        "sourceFormat": { "enum": ["md", "mdx"] },
+        "sourceFormat": { "enum": ["md", "mdx", "static-site", "readme"] },
+        "snapshotTag": { "type": "string" },
         "workflowRunUrl": { "type": "string" }
       }
     }