[patch] Restore applied publisher contract

[libops-agent]

Summary

• restore the cleanup-safe immutable shared publisher revision already authorized for Vault Init
• keep the signing certificate identity and contract test on that exact revision

Validation

• Go publication contract tests
• actionlint
• git diff --check