Keep automatic publication from dirtying the canonical checkout after every successful landing. Defense: Serialized task landings require a clean handoff; reviewed package metadata is safer than Corepack mutating main as a deployment side effect.