fix(release): follow dx-corp public repo rename

[haasonsaas]

Summary

• admit signed-release dispatches in the current dx-corp/code repository
• query protected release-branch rules from the current repository slug
• keep the exact repository/ref fence and protected-branch admission contract fail closed

Root cause

The public release workflow still required github.repository == 'evalops/maestro' after the repository moved to dx-corp/code. Every current dispatch therefore skipped the prepare job and could not publish signed Maestro artifacts.

Verification

• PASS: node .github/workflows/check-release-workflow-contract.mjs
• PASS: node --test .github/workflows/release-branch-admission.test.mjs
• PASS: actionlint .github/workflows/release.yml
• NOTE: the broader imported Node test set passed 74/75 locally; the unchanged missing index has a finite deadline case exceeded its macOS 5-second subprocess timeout after completing its 60 mocked polls. The changed release contract and admission tests passed directly.

Risk / rollback

The change only updates the fail-closed repository identity used by release admission. Reverting restores the old slug and causes all current release dispatches to skip again.

Change-Origin: agent
Agent-Contributor: role=implementation; harness=codex; provider=openai
Human-Edited: false
Human-Reviewed: false

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.