Keep review builds usable under external release approval

Clarify where production approval is enforced before adding a runtime review block. A reviewer rejected a code-fingerprint sign-off mechanism because fixes invalidated approval and QA needed the tools working before sign-off. When the release process controls production through review, QA, credential handoff and publication, keep the integration operational, put a pending-review footer on result and confirmation cards, and track approval in the release system. Verify the shared bundle using its normal endpoint configuration with transport redirected to a fake provider so a hidden QA block is caught.