docs(skills): tighten cut-release resume flow

[stozo04]

Summary

• Load release references only when the detected stage needs them, so post-merge resumes do not repeat the PR gate.
• Resolve the build SHA from the final explicitly included merged PR and stop for clarification when newer merges make the release cutoff ambiguous.
• Handle GitHub issue/PR number confusion explicitly and verify the intended version at the selected SHA.
• Keep the Claude, Cursor, and Codex skill copies byte-identical.

Verification

• Skill validator: PASS
• Harness sync: PASS (46 files x 3 harnesses); all three cut-release SKILL.md files have the same SHA-256.
• pre-pr-sweep.ps1 -DocsOnly -SkipInspectCode: GREEN for 7c4034e.
• Markdown lint: 194 files, 0 findings.
• Link check: 3 changed files, 0 dead links.
• CSpell: 466 files, 0 unknown words.
• Script self-checks, JSON, dictionary sync, and Gitleaks: PASS.

Inspect Code was skipped because no Android Studio export was available and this PR changes only skill Markdown. Product builds, emulator verification, and onboarding were skipped by the DocsOnly gate.

---

Note

Low Risk
Documentation-only changes to agent skill Markdown; no app, script, or release pipeline code changes.

Overview
Updates the cut-release skill (identical copies under .claude, .codex, and .cursor) so resuming a Play release is stage-aware and less error-prone when main moves after the version-bump PR merges.

Stage detection now treats version history and GitHub PR data as authoritative (not chore/release-* branch names), adds handling for an unmerged local bump, and requires correcting mistaken issue numbers vs PR numbers. Ground-truth docs are loaded only when the current step needs them—especially skipping pre-pr-sweep on post-merge resume.

Build SHA replaces the old “bump merge commit only” rule: after merge, the skill must pick the final included merged PR (owner-named cutoff or explicit ask), verify app/build.gradle.kts at that SHA, build/tag/notes from that point, and persist it in releases/openloop-<version>-<code>.buildsha for Stop B / Step 7 resume.

^{Reviewed by Cursor Bugbot for commit f4c57cd. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

Bugbot Autofix prepared fixes for both issues found in the latest run.

• ✅ Fixed: Stop B resume loses build sha
  • Added buildSha sidecar file written at Step 4 and read at Step 7 to preserve the exact commit that built the AAB across resume.
• ✅ Fixed: Resume misses unmerged bump work
  • Added detection step 7 to handle versionName > latest tag with no bump PR, resuming at Step 2 instead of stalling.

_{You can send follow-ups to the cloud agent here.}

^{Reviewed by Cursor Bugbot for commit 7c4034e. Configure here.}