Add the operator-driven release-transparency publisher through `make publish-transparency RELEASE_DIR=…` and `make resign-transparency-pointer`. It publishes evidence only: digests, the companion manifest, install-proof receipts, a signed hash-chained ledger entry, and a signed latest pointer. It neither gates nor alters delivery, and never builds, rebuilds, mutates, deletes, or tags release bytes. Implement the cross-repo byte-normative shared sol pbc release-transparency publisher v1 contract. No new dependency enters shipped product code, `crates/solstone-linux` is unchanged, and no live publication, credentials, or real keys are involved.