fix(ci): preserve asset integrity step boundary

.gitea/workflows/cd.yaml

@@ -2265,6 +2265,8 @@ jobs:
           asyncio.run(main())
           PY
 
+      # 2026-03-31 ogt: 移除中間通知
+
       # MCP version discovery must have a durable receipt store before the
       # signal worker starts its first six-hour lifecycle run. Apply the
       # additive RLS schema, then verify both schema policy and runtime-role
@@ -2385,8 +2387,6 @@ jobs:
           asyncio.run(main())
           PY
 
-      # 2026-03-31 ogt: 移除中間通知
-
       # 2026-03-31 ogt: P0-1 Secrets 自動注入 (ADR-035 強制)
       # 2026-03-31 ogt: 加入 AI API Keys (修復 mock_fallback 問題)
       - name: Inject K8s Secrets