R2: separate ordinary CI from canonical artifact promotion

.github/workflows/ci.yml

@@ -9,7 +9,7 @@ permissions:
 
 concurrency:
   group: webforge-ci-${{ github.ref }}
-  cancel-in-progress: false 
+  cancel-in-progress: false
 
 jobs:
   verify:
@@ -50,47 +50,3 @@ jobs:
 
       - name: Full environment release gate
         run: npm run release:full
-
-  canonical-artifact:
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    steps:
-      - name: Checkout exact canonical main source
-        uses: actions/checkout@v4
-        with:
-          ref: 20ef0fcd45bcf5b8cdd4c9c61fd1eb07c48041d6
-
-      - name: Setup canonical Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: 24.20.0
-
-      - name: Verify pinned Node and npm
-        run: |
-          test "$(node --version)" = "v24.20.0"
-          test "$(npm --version)" = "11.19.0"
-          test "$(git rev-parse HEAD)" = "20ef0fcd45bcf5b8cdd4c9c61fd1eb07c48041d6"
-
-      - name: Install pinned Vercel CLI
-        run: npm install --global vercel@59.11.7 --ignore-scripts --no-audit --no-fund
-
-      - name: Build canonical webforge-reference artifact
-        env:
-          WEBFORGE_ALLOW_NETWORK: '1'
-          WEBFORGE_GENERATION_RUN_ID: ${{ github.run_id }}-${{ github.run_attempt }}
-          WEBFORGE_REPOSITORY: ${{ github.repository }}
-        run: WEBFORGE_SOURCE_SHA="$(git rev-parse HEAD)" npm run artifact:canonical
-
-      - name: Upload canonical provenance artifact
-        if: always()
-        uses: actions/upload-artifact@v4
-        with:
-          name: webforge-reference-canonical-main-20ef0fcd-${{ github.run_attempt }}
-          path: |
-            generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/runtime/**
-            !generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/runtime/node_modules/**
-            generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/*.receipt.json
-            generated/canonical/webforge-reference/${{ github.run_id }}-${{ github.run_attempt }}/artifact-run.summary.json
-          include-hidden-files: 
-
-          if-no-files-found: warn