fix(release): review feedback round 8 (2 items)

- release.rake: only label success-message count as "required" when
  `evaluated` was actually filtered to the required subset. On stable
  releases the filter is skipped, so reporting "(N required checks)"
  misrepresented the count when branch protection was visible.
- main-ci-status.sh: replace stale `release.rake:451-455` line-number
  pointer (which now lands inside an error heredoc) with a stable
  reference to `validate_main_ci_status!` so the "keep in sync" note
  does not rot on the next edit.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: justin808

.claude/hooks/main-ci-status.sh

@@ -121,8 +121,8 @@ checks_jsonl=$(gh api \
 # attempt (highest check_run id). The key intentionally includes the
 # suite id so we only collapse true reruns and not unrelated workflows
 # that happen to share a job name (e.g. this repo has multiple workflows
-# that each define a `detect-changes` job). Mirrors the Ruby dedup at
-# release.rake:451-455. Keep the two in sync.
+# that each define a `detect-changes` job). Mirrors the Ruby dedup in
+# `validate_main_ci_status!` (rakelib/release.rake). Keep the two in sync.
 checks_json=$(echo "${checks_jsonl}" | jq -s '
   [.[] | {id, name, status, conclusion, html_url, suite_id: (.check_suite.id // .id)}]
   | group_by([.suite_id, .name])

rakelib/release.rake

@@ -583,7 +583,12 @@ def validate_main_ci_status!(monorepo_root:, is_prerelease:, allow_override:, dr
     return
   end
 
-  qualifier = required_names.nil? ? "" : "required "
+  # Only label the count "required" when `evaluated` was actually filtered to
+  # the required subset (prerelease + branch protection visible). On stable
+  # releases we keep evaluating every check_run, so the count includes
+  # non-required runs and labelling them "required" would misrepresent the
+  # gate.
+  qualifier = is_prerelease && required_names ? "required " : ""
   noun = evaluated.length == 1 ? "check" : "checks"
   puts "✓ Main CI is healthy on #{short_sha} (#{evaluated.length} #{qualifier}#{noun})"
 end