[remigiusz-antczak]

Summary

Release 1.631.0 stamps 3 merged changes (#2167, #2168, #2169).

• Hand-backs also wait for a running git commit, not only git push, matched on real git processes only.
• route_auth_map.py reads typed TypeScript route registrations and Fastify root hooks, and reads each hook path test by its operator; tenant_scope_check.py no longer crashes on a trailing backslash in an open string.
• The tool hub hands zizmor Dependabot configs and action manifests, and the scanner JSON reader starts at the first line that opens with [ or {.
• Delivery doctrine: cheap checks before the heavy slot, a settled base after the grant, merged rerun receipts, a zero-worker pool alarm.

land-release.sh stamped the version files, plugin manifests, CHANGELOG and generated indexes.

Verification

Run on this head:

• Ran the size ratchet and bash -n install.sh: both passed; version strings agree at 1.631.0.
• Full-tree privacy gate, banlist and secret greps on the diff, and identity check all passed.

🤖 Generated with Claude Code