The publish workflow ran green while every npm publish silently failed with:

npm error 422 Unprocessable Entity - PUT https://registry.npmjs.org/@synsci%2fopenscience-linux-x64-baseline
Error verifying sigstore provenance bundle: Failed to validate repository information:
package.json: "repository.url" is "", expected to match "https://github.com/synthetic-sciences/openscience"

With NPM_CONFIG_PROVENANCE=true, npm requires every published manifest's repository.url to match the repository the workflow runs from — case-sensitively. The generated platform/meta manifests had no repository field, sdk/plugin had none either, and root/launcher used a different-case path.

• stamp repository into the generated platform + wrapper manifests (build/publish scripts)
• add repository to the sdk and plugin packages
• normalize existing repository URLs to the canonical lowercase path
• the release orchestrator now records per-section failures and exits non-zero — a green publish run means packages really shipped (this failure mode was invisible because sections swallowed errors)

Verified: turbo typecheck clean. The v1.2.3 GitHub release with all 11 platform archives already shipped from the previous run; nothing was published to npm at 1.2.3, so re-dispatching after this merge will cleanly publish 1.2.3 everywhere.