release: v1.77.0 — release-dry-run + cc-version-drift + /goal SDLC-discipline gates

[BaseInfinity]

Summary

Versioned cut of PR-B (#353) + PR-C (#354) + PR-D (#355). Trusted Publishing handles npm on tag push.

What ships in v1.77.0

Source	Headline
PR-B #353	`release-dry-run.yml` catches release.yml regressions at PR-time (A1, post-mortem of v1.75.1)
PR-C #354	`cc-version-drift.yml` opens drift issue when CC baseline >5 patch releases behind (closes #350)
PR-D #355	`/goal` SDLC-discipline gates: 95% confidence floor + DLC binding in condition

Self-test highlight

PR-B's new `release-dry-run.yml` workflow ran ON the PR that introduced it and SUCCEEDED — first proof that the temp-version-rewrite + `--tag dry-run` flow works end-to-end.

Cross-model design review

Both new workflows + the /goal gates went through Codex gpt-5.5 xhigh design review (`.reviews/176-followup-prio-codex.md`). Real catches:

• A1 dry-run against already-published version fails today — required temp-version rewrite
• A1 `id-token: write` would attempt OIDC mint on every PR — explicit `contents: read` only
• docs(roadmap): correct #347 — native /goal exists; add #350 cadence-gap fix #350 `weekly-update.yml` is the wrong host (cron disabled + tests assert no `issues: write`) — standalone workflow
• "minor versions" terminology wrong — `2.1.150 → 2.1.180` is patch-level

Sequence after merge

1. `git tag v1.77.0 main` (from the post-merge SHA)
2. `git push origin v1.77.0`
3. `release.yml` fires → npm publish via Trusted Publishing → GitHub Release page auto-created
4. Verify: `npm view agentic-sdlc-wizard version` → `1.77.0` + Publisher = "GitHub Actions"

Test plan

• `bash tests/test-doc-consistency.sh` green (40/40)
• `bash tests/test-audit-session-load.sh` green (10/10, both skills at 4989 + 4993 tokens — under cap)
• `bash tests/test-version-logic.sh` green
• Version bumps across 7 files coherent (package.json, SDLC.md ×2, .claude-plugin/×2, wizard doc template, update skill changelog)
• CI `validate` green on this PR