chore: sync Registry Stack identifiers to the v0.33.0 release source

[jeremi]

Rebind the publisher bundle to the exact Registry Stack v0.33.0 release source commit.

The release publication dispatch fails closed unless src/upstream/source.json
names the exact released source commit and identifier catalog digest. The
previous sync pinned 60b0c2b0, which is the release-preparation commit; main
has since advanced through two release-control fixes, and the candidate is bound
to 125f67b37b424ae7a43d8760c33fb73d4be8b8a1.

Regenerated with:

node scripts/import-registry-stack-catalog.mjs \
  --source-revision 125f67b37b424ae7a43d8760c33fb73d4be8b8a1
npm run build

What changed

Only the source-commit binding. The identifier catalog is byte-identical:

• catalog_sha256 stays 800de6c787568677a26e2ccf4b0bc0fb5aaada4ac51e044a1b956b27fa3a1748
• 160 active identifiers, 178 preserved historical identifiers, both unchanged
• every one of the 619 changed lines is a commit-SHA reference; no identifier,
  artifact, schema, or route content moved

Verification

• npm test (21 tests, check, check:problem-routes) passes
• npm run check reports public/ matches generated output

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-22T15:35:37.905979Z	2187903	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.