chore: sync WaitSpin public client 0.1.16 source refresh

[nttylock]

Why

• Private main advanced past the last public sync (2026-08-11) with export-allowlisted content changes (.gitignore from the promo/leak-1x1 merge), so public/export-manifest.json and the export tree hash no longer match the canonical export; the private WaitSpin Public Sync gate fails.

How

• Commit A 92df5460 — regenerated curated export: .gitignore + public/export-manifest.json only (tree cdff3dc9b9fdc3e38f630339c9f8e797fcc97d9d17a409ee8428ab98a20d396d).
• Commit B d25874ac — provenance refresh bound to Commit A; changes only public/provenance/waitspin-vscode.json.
• No product builds touched: version 0.1.16, canonical VSIX 34943ce5c127ab56fde66662adece313915e553ffa45c9f4cd81e0aabc1c720f, npm/Marketplace/Open VSX artifacts unchanged.

Tests

• Exporter npm run waitspin:public-export from private 01de9fc3 (Node 22.14.0 / npm 10.9.2): 167 exported files.
• All 165 manifest file hashes verified against the branch head: 0 mismatches.
• Tracked VSIX SHA-256 matches provenance vsix_sha256.
• Merge by merge commit (not squash/rebase) so Commit A stays reachable from provenance source_commit.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d25874ac8e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Point provenance at an ancestor of this commit

In the reviewed history, 92df5460... and this commit are sibling commits with the same parent, so the declared source commit is not reachable from this commit. Consequently, scripts/waitspin-public-tree-check.mjs fails at its git merge-base --is-ancestor check, and the first command in the public waitspin:ci workflow exits before any build or tests run. Preserve the two-commit ancestry or update this field to a commit that both contains the manifest and is an ancestor of the resulting head.

Useful? React with 👍 / 👎.