Restore the approved manifests publisher identity #60

🤖 Generated by the Agentic Engineer

Problem and evidence

The current CD caller selects an unapproved signing revision. Platform regeneration run 40071335218 refuses AWS and writes no partial observation set. The current platform approval for this consumer retains the previously selected publisher.

Expected outcome

Restore the explicitly approved publisher identity while the newer signer undergoes the independent platform approval process. Preserve all current signature and publication safeguards and unrelated dependency references.

Acceptance criteria

• Compare the current and approved publisher executable source and helpers; assess any behavior or tool changes lost by restoring the approved revision.
• Restore only the CD publisher reference to the current approved identity, with the reason recorded beside it.
• Validate the manifest package and complete current-head CI, review and protected merge.
• Verify the actual release and signed publication; re-run genuine platform observations after both consumer recoveries.

Part of devantler-tech/platform#5267. Size: small recovery; newer approval remains separate.