A merge queue rebases the branch after tests pass, but the artifact fingerprint still reflects the pre-rebase commit and provenance checks reject the release

The code intent did not change much, yet artifact identity no longer matches the merge result the repository now points at.