proof(pointer): require release tag for manual evidence template

[rogu3bear]

Summary

• make manual-release-evidence-template fail early when RELEASE_TAG is omitted
• keep generated manual release evidence artifact-bound from the first record
• pin the release-tag requirement in IdentityTests

Verification

• make -C apps/macos manual-release-evidence-template RELEASE_TAG= exits 2 with the required RELEASE_TAG message
• swift test --package-path apps/macos --filter IdentityTests/testManualReleaseChecklistCoversHumanOnlyProof
• git diff --check

Remaining blockers

• Release authority blockers prevent mass-production readiness #71 remains open for notarization, Gatekeeper acceptance, stable release metadata, and completed manual evidence before mass-production readiness

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• apps/macos/Scripts/manual-release-evidence-template.sh - Added early validation for RELEASE_TAG requirement
• apps/macos/Tests/PointerDesignerTests/IdentityTests.swift - Updated test assertions to verify RELEASE_TAG error handling

---

_{Reviewed by grok-code-fast-1:optimized:free · 98,046 tokens}