Protected delivery demo

This repository models a harmless application promotion through development, staging, and production. It is a foundation for demonstrating:

• first-class environments and deployment history;
• independent manual approval and no self-approval;
• environment-scoped secrets;
• business-hours and freeze-window decisions;
• external checks and GitOps reconciliation;
• audited emergency bypass and release evidence bundles.

The active workflow is manual-only and validates fixtures; it never contacts a cluster or changes an environment.