feat(DEN-1343): harden release reports across accessibility and print modes

[ORESoftware]

Summary

Extends the merged offline release-plan report from a Chromium screen-only contract to an accessible, printable, progressive-enhancement artifact validated in Chromium, Firefox, and WebKit.

Audit findings addressed

• the report had no explicit table captions or skip navigation;
• filtering was not explicitly associated with instructions and status;
• JavaScript-disabled readability was untested;
• printing could preserve a filtered screen state and omit artifacts;
• forced-colors behavior and browser-engine portability were unverified.

Changes

• adds a visible-on-focus skip link and stable main target;
• gives every artifact table a descriptive caption;
• associates filtering with help and live status text;
• disables filtering until the exact-hash-authorized script activates, while hiding controls and retaining every row when JavaScript is unavailable;
• adds print rules that hide interactive controls, restore filtered rows, repeat table headers, avoid splitting rows where practical, and retain provenance/count context;
• adds forced-colors boundary hardening;
• adds deterministic Node tests for progressive enhancement, captions, print restoration, and forced-colors CSS;
• adds Playwright contracts for keyboard order, accessible names/captions, filtering and Escape reset, print media, JavaScript-disabled rendering, forced-colors, mobile overflow, console/page errors, and external requests;
• expands the read-only pinned GitHub Actions workflow to Chromium, Firefox, and WebKit with per-engine artifacts and diagnostics.

Preserved behavior

The Rust release planner, zed release plan --json, terminal output, preflight, publishing, package lifecycle, and atomic/symlink-safe report publication remain unchanged. The CSP hashes are still derived from the exact inline stylesheet and script.

Final validation

All GitHub Actions passed on exact head ee186ad8ae95a2cba436448ffa413fb9bafb15ce:

• release plan browser report: Chromium, Firefox, and WebKit each passed deterministic renderer tests, locked Rust fixture generation, keyboard/accessibility structure, filtering and Escape reset, print restoration, no-JavaScript readability, forced-colors styling, mobile overflow, and zero external requests or browser errors;
• main CI;
• repository hardening;
• develop-shell;
• polyglot;
• copy-mode OCI contract;
• formal review procedure;
• agents policy.

The browser matrix retained the generated offline report as a per-engine artifact. No unresolved review threads remain.

Linear: DEN-1343

[linear-code]

DEN-1343