Release and seal a pack
Only a code owner of the AEGIS repository can release a pack. Release seals it in Cloud Storage and writes a register row.
The pack is uploaded to the evidence bucket with a retention policy, its manifest records who released it, and the register shows it on the sandbox page. The proof of concept uses a short, unlocked retention policy, because a locked policy can't be removed or shortened.