feat(gitea): add package release promotion receipts

scripts/ci/tests/test_generate_cicd_artifact_receipts.py

@@ -76,9 +76,21 @@ dev = ["pytest>=8"]
             encoding="utf-8"
         )
     )
+    package_release = json.loads(
+        (out_dir / "awoooi-ci-package-release-promotion.json").read_text(
+            encoding="utf-8"
+        )
+    )
 
     assert manifest["schema_version"] == "awoooi_cicd_artifact_receipts_v1"
     assert manifest["ready"] is True
+    assert manifest["receipt_count"] == 4
+    assert [receipt["id"] for receipt in manifest["receipts"]] == [
+        "sbom",
+        "provenance",
+        "artifact_retention",
+        "package_release_promotion",
+    ]
     assert manifest["operation_boundaries"] == {
         "secret_values_collected": False,
         "github_api_used": False,
@@ -97,3 +109,24 @@ dev = ["pytest>=8"]
     assert (
         retention["operation_boundaries"]["package_registry_write_attempted"] is False
     )
+    assert (
+        package_release["schema_version"] == "awoooi_cicd_package_release_promotion_v1"
+    )
+    assert (
+        package_release["release_channel_contract"]["primary_package_registry"]
+        == "gitea_packages"
+    )
+    assert (
+        package_release["rollback_receipt_contract"][
+            "rollback_requires_post_apply_readback"
+        ]
+        is True
+    )
+    assert (
+        package_release["operation_boundaries"]["package_registry_write_attempted"]
+        is False
+    )
+    assert (
+        package_release["operation_boundaries"]["gitea_release_write_attempted"]
+        is False
+    )