feat: ship deterministic parser and lifecycle release

tools/repository-hygiene.test.mjs

@@ -34,6 +34,7 @@ const ROOT_ALLOWLIST = new Set([
   'node_modules',
   'package-lock.json',
   'package.json',
+  'pnpm-lock.yaml',
   'progress.md',
   'quarantine',
   'reports',
@@ -275,7 +276,7 @@ test('single-source and generated-output boundaries remain explicit', async () =
   const compose = await readFile(path.join(ROOT, 'docker-compose.yml'), 'utf8');
   const gitignore = await readFile(path.join(ROOT, '.gitignore'), 'utf8');
 
-  assert.match(template, /^交付版本：0\.5\.118\s*$/mu);
+  assert.match(template, /^交付版本：0\.5\.123\s*$/mu);
   assert.match(template, /^适用范围：当前 18 项运营业务输入；执行能力以生命周期发布门槛为准。\s*$/mu);
   assert.doesNotMatch(template, /^事实基线：/mu);
   assert.equal(tsconfig.compilerOptions.outDir, '.build');