test(DEN-2877): disposable dependency-head reconciliation canary

[ORESoftware]

Disposable canary — do not merge

This draft PR creates a synthetic dependency change for the nightly reconciliation graph test.

• bumps the branch-only Zed package version from 0.1.0 to 0.1.1;
• keeps the existing zed-pkg/zed-interfaces Zed edge and vendor/zed-interfaces git submodule intact;
• records an explicit merge_forbidden: true canary manifest;
• is intended to be consumed by a separate zed-pkg-test/java-app draft PR through both .zpkg.toml and an exact gitlink.

Expected reconciler behavior:

1. discover this open dependency PR from the Zed dependency graph;
2. discover the dependent java-app canary PR;
3. update/re-evaluate the dependent PR against this exact head;
4. never merge either canary regardless of readiness because the canary manifest and draft state are explicit blockers.

Base: daa9d8f4f23b4ef1c8dd4a11f9d802c4fce83b48
Exact canary head: c9fa3cb0b50bb39dc3cff005ef3640ae05d9ebfd

Linear: DEN-2877, DEN-2876, DEN-801
Source authority PR: https://github.com/ORESoftware/project-registry/pull/44

[linear-code]

DEN-2877

[ORESoftware]

{
"schema_version": "nightly_reconciliation_canary_ledger.v1",
"generated_at": "2026-08-08T19:53:18Z",
"mode": "dry-run",
"subject": "zed-pkg-test/java-lib#2",
"evaluated_head_sha": "c9fa3cb0b50bb39dc3cff005ef3640ae05d9ebfd",
"role": "dependency",
"dependency_context": {
"scenario": "dependency-head-and-version-change",
"expected_consumer": "zed-pkg-test/java-app",
"expected_branch_version": "0.1.1"
},
"gates": {
"draft": true,
"merge_forbidden_fixture": true,
"continuous_open_hours_at_least_55": false,
"signed_readiness_present": false,
"signed_critic_present": false,
"production_finalizer_enabled": false
},
"authorized": false,
"merge_attempted": false,
"mutations": [],
"blockers": [
"draft-pull-request",
"merge-forbidden-test-fixture",
"continuous-open-age-below-55-hours",
"missing-independent-readiness-attestation",
"missing-independent-critic-attestation",
"trusted-finalizer-not-enabled"
],
"next_gate": "Re-evaluate the dependent canary graph only; never merge this fixture."
}

This is a credential-free dry-run ledger, not a readiness opinion or merge authorization. The PR remains a draft and must never be merged.