noyalib-ci-and-releaselisted

# noyalib — CI and release runbook > **See also `reference.md`** for the full workflow inventory (25 files), > the exhaustive `ci.yml` job list, the `shared-no-std.yml` verbatim > triad, the deep per-tool supply-chain detail, the `gh` cheat-sheet, the > satellite lockstep matrix, and the caller-permissions table. This file > keeps the doctrine and the compact runbook; reference.md holds the > inventory. Repo: `github.com/sebastienrousseau/noyalib` — pure-Rust YAML 1.2 library, `#![forbid(unsafe_code)]`, single-crate workspace after ADR-0005 splits (`noyalib-wasm` at v0.0.12, `noyalib-mcp` at v0.0.13, `noyalib-lsp` + `noya-cli` at v0.0.14+ per RELEASE-NOTES-v0.0.13.md). Current release branch: `feat/v0.0.14`. Ground truth: `.github/workflows/*`, `Makefile`, `supply-chain/config.toml`, `deny.toml`, `RELEASE-NOTES-v0.0.13.md`, `RELEASE-NOTES-v0.0.14.md`, `doc/adr/0005-workspace-split.md`. If this skill and those files disagree, the files win — re-verify with the commands in "Provenance and maintenance" at the bottom. Jargon (used everywhere below): - **Orchestrator** — `.github/workflows/ci.yml` on push / PR / nightly. - **Shared workflow** — a `.github/workflows/shared-*.yml` file with a `workflow_call:` trigger; consumed by the orchestrator via `uses: ./.github/workflows/shared-*.yml` and by satellite repos via `uses: sebastienrousseau/noyalib/.github/workflows/shared-*.yml@<sha>`. - **Compile surface** — the tuple `(toolchain, features, target, RUSTFLAGS/RUSTDOCFL