1d4c206563
main pushes now move :latest (in addition to the immutable :<sha>), so a merge to main updates production's pointer directly — no separate release needed just to refresh :latest. The v* release tag's distinct job becomes the dated :<version> marker (it still refreshes :latest harmlessly). Still no :main tag. Rules 47/46 + 10/4 updated to match on both instances. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>