Build provenance records the merge queue pseudo-ref, but the published tag points elsewhere and auditors cannot reconcile the release

All artifacts exist, yet traceability breaks because the build source ref and user-facing release ref diverged.