[mekilis]

Change

Stable binary releases currently fail Homebrew publication when the tap token cannot create a branch. Publish the formula in a separate job using dedicated publisher and reviewer GitHub Apps scoped to the tap repository.

The publisher opens the formula PR; the reviewer verifies the bot author, exact base and head commits, a single modified convoy.rb, and the complete formula against published stable release archive digests. The publisher then squash-merges using normal repository protections and verifies the merged formula. Interrupted runs resume only verified state; older releases, foreign branches, and unrelated changes are rejected.

Manual dispatch can reconcile an already-published release without rebuilding binaries. Main snapshots continue to skip Homebrew.

Also make the partition rebuild test fixture reject completed indexes and wait for each predecessor queue scan before releasing the next simulated rebuild. This keeps the existing four-run, ordering and completion assertions deterministic without changing production behavior.

Validation

• 13 focused tests cover release assets, approval boundaries, and interrupted branch recovery.
• Workflow syntax checks, package vet, and full repository Go lint pass.
• The completed-index regression fails before the fixture fix. It and the chained-queue test pass 20 repetitions after the fix; the full partition package passes.
• Both app identities authenticate with the intended repository permissions; reconciling v26.9.2 correctly reports the formula is already current.