Record verified Toolbox 2.14.1 publication

[ty-everett]

Records the protected publication of Toolbox core/client/mobile 2.14.1 in the release ledger and generated migration table. Source/runtime packages, dependency floors and infrastructure remain unchanged.

Publication evidence: TS Stack #616, source fc6ebef7132f77f93995fb7cd2869a5f8e7c509d, protected release 36088452203. Exact-main CI and CodeQL pass; all three npm latest versions, SHA-512 integrities and SHA-256 tarball digests match the immutable candidate. GitHub source and CycloneDX attestations verify, npm provenance identifies that source/run, and the protected post-release verification (including registry signatures/provenance) succeeds. The exact candidate also passed 48 binary createAction accounting/compatibility cases against six published SDK versions.

Local health, lint, format, TypeScript and generated package-documentation checks pass after a clean frozen install and workspace build. No source tests are changed or required by this bookkeeping-only diff. Exact-head CI 36090488546, CodeQL 36090488545, Conformance 36090488602, zero-new-Sonar findings and the complete merge gate pass at 984af84cda600a7a4c9ac3338a0f3889360b915a. Both CodeQL analyses report zero results at merge revision c04eeacc2084d2927d33fc22803e30982cecfc6f; no open alert or review thread remains. Self-review confirms only the three verified package baselines and their generated rows change.

BotBoard #615 coordinates this narrow follow-up. No new package or infrastructure publication is triggered by this PR. Desktop work is handed off/held at the operator’s request; downstream Peacock and Browser work continues independently.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ty-everett]

Maintainer self-review of 984af84: only the three verified 2.14.1 published baselines and corresponding generated migration rows change. All source packages, dependency floors, workflow permissions and infrastructure are unchanged. Registry bytes/latest tags and source/SBOM/npm provenance match protected release 36088452203; its post-release verification passes. Local health/lint/format/typecheck/generated docs pass. Exact-head CI 36090488546, CodeQL 36090488545, Conformance 36090488602, zero-new-Sonar findings and merge gate pass, with no review thread. CodeQL merge-revision results are zero and the open-alert list is empty. Scope-based runtime skips are expected for this bookkeeping-only change and accepted by merge-gate. No further npm or infrastructure publication is needed.