ci: Binding RC consumes Bazel-built natives via assembler

[DecisionNerd]

Summary

Binding Release Candidate still recompiles natives with maturin/napi (Cargo graph) while PR CI already builds //:binding_cdylibs and assembles via scripts/ci/assemble_bazel_binding_packages.py. Publish authority should be Bazel-built bytes.

Acceptance criteria

• binding-release-candidate.yml builds Bazel cdylibs and assembles packages via assemble_bazel_binding_packages.py for at least Linux; prefer full matrix cutover if workable
• Stop maturin/napi recompile of a second graph where feasible on cut-over lanes
• Update docs/development/bazel-migration-cutover.md (and release-process as needed)
• Shrink/retire Linux sticky target/ on artifact-producing lanes once hermetic where applicable

Non-goals

• Linux aarch64 wheel + sdist install test (follow-on)
• Moving Clippy/fuzz/crates.io publish onto Bazel

BDD

• Given Binding RC runs on a cut-over platform, When packages are assembled, Then natives come from Bazel //:binding_cdylibs without maturin build / napi build recompile
• Given assembler argv, When it looks like a silent recompile, Then the assembler refuses

Source

Devinfra Audit Fix-It Plan Wave D / PR11

[coderabbitai]

🔗 Related PRs

#289 - fix(release): amend unpublished main npm artifact [merged]
#314 - fix(release): host-native npm only in Binding RC offline rehearsal [merged]
#377 - test(release): isolate npm publication dry-run policy [merged]
#422 - build(bazel): model PyO3/napi cdylibs and packaging handoff (#7) [merged]
#427 - build(bazel): cut over CI Gate, retain rollback, retire PR Cargo sticky disks (#4) [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!