chore(create): revert pre-feature test placeholders + clarify integrity comment

Two PR review follow-ups:

- `discovery.spec.ts` (#3137604410, #3137608041): the `@acme-corp`
  placeholder rename inadvertently touched pre-existing GitHub-URL
  tests that have nothing to do with the `@org` feature. Revert those
  four lines back to `acme-corp`; the new manifest-specific tests
  below keep `@your-org`.
- `org-tarball.ts` (#3137690878): the `verifyIntegrity` comment
  claimed "don't silently accept" but the unknown-format branch does
  exactly that. Rewrite the comment to match reality — we skip
  verification for unknown integrity formats because `sha512-<base64>`
  is the universal case and erroring out on anything else would break
  extracts for no benefit.

Author: fengmk2

packages/cli/src/create/__tests__/discovery.spec.ts

@@ -85,12 +85,12 @@ describe('GitHub template helpers', () => {
   });
 
   it('should infer the repository name from GitHub templates', () => {
-    expect(inferGitHubRepoName('github:your-org/fate-template')).toBe('fate-template');
-    expect(inferGitHubRepoName('https://github.com/your-org/fate-template')).toBe('fate-template');
+    expect(inferGitHubRepoName('github:acme-corp/fate-template')).toBe('fate-template');
+    expect(inferGitHubRepoName('https://github.com/acme-corp/fate-template')).toBe('fate-template');
   });
 
   it('should resolve GitHub templates to degit without reusing the original URL as destination', () => {
-    const template = discoverTemplate('https://github.com/your-org/fate-template', ['my-app'], {
+    const template = discoverTemplate('https://github.com/acme-corp/fate-template', ['my-app'], {
       rootDir: '/tmp/workspace',
       isMonorepo: false,
       monorepoScope: '',
@@ -106,7 +106,7 @@ describe('GitHub template helpers', () => {
     });
 
     expect(template.command).toBe('degit');
-    expect(template.args).toEqual(['your-org/fate-template', 'my-app']);
+    expect(template.args).toEqual(['acme-corp/fate-template', 'my-app']);
   });
 
   it('should keep manifest-resolved specifiers literal when skipShorthand=true', () => {

packages/cli/src/create/org-tarball.ts

@@ -33,8 +33,10 @@ function verifyIntegrity(bytes: Uint8Array, integrity: string | undefined): void
   }
   const parsed = parseIntegrity(integrity);
   if (!parsed) {
-    // Unknown format — don't fail hard, but don't silently accept either.
-    // Registry responses normally include sha512; anything else is unusual.
+    // Unknown integrity format — skip verification. Registry responses
+    // normally advertise `sha512-<base64>`; anything else is unusual
+    // enough that we'd rather let the extract continue than fail hard
+    // on a format we don't understand.
     return;
   }
   const hash = createHash(parsed.algorithm);