docs(ship): P0 complete -> v1.28.0 (local-only, push credentials unavailable)

---ci---
project: acdl
phase: 0
milestone: v1.29
status: complete
escalation: release_pending
resolution: auto
type: release_pending
---/ci---

.ciagent/CHECKPOINT.json

@@ -1,10 +1,10 @@
 {
   "phase": 0,
-  "stage": "grill",
+  "stage": "complete",
   "milestone": "v1.29",
   "phase_role": "pre_execution",
   "attempts": 0,
-  "updated_at": "2026-08-20T00:40:00Z",
+  "updated_at": "2026-08-20T00:45:00Z",
   "project": "acdl",
   "projects": ["acdl", "nova-blockchain-exchange"],
   "active_milestone": "v1.29",
@@ -23,8 +23,8 @@
     "confidence": 0.72,
     "critical_fixes": 4,
     "tracked_conditions": 6,
-    "binding_decisions": ["G-1", "G-2.1", "G-2.2", "G-3", "G-4", "G-5"],
-    "critical_fix_ids": ["CF-1", "CF-2", "CF-3", "CF-4"]
+    "binding_decisions": ["G-1", "G-2.1", "G-2.2", "G-3", "G-4", "G-5"]
   },
-  "notes": "v1.29 GRILL complete. PROCEED-WITH-CONDITIONS 0.72. 4 critical fixes applied to PLAN.md: CF-1 (M1.5 hard P6 ship gate, spike 8->12 items), CF-2 (covered-reference REQs gated by operator-attested Result column), CF-3 (P1 pushes v1.29.0 intermediate tag, P5 smoke no hedge), CF-4 (kj source-fetch confirmed before P1 Wave 1, recorded in kj-version.txt). 6 tracked conditions (TC-1..TC-6). Covered-reference pattern accepted as verification surface ONLY with CF-1+CF-2 (G-1)."
+  "phase_ship": {"tag": "v1.28.0", "release": "local-only (push credentials unavailable — blocked_env_vars policy)", "merged_to": "milestone/v1.29-reposplit-identity"},
+  "notes": "v1.29 P0 COMPLETE. Tag v1.28.0 created (local). Merged phase/00 -> milestone/v1.29-reposplit-identity. Push failed (no credentials — local-only fallback per ship workflow). All pre-execution stages done: SPECIFY, CLARIFY, RESEARCH, PLAN, GRILL, MVP/UX CHECK. Next: P1 publish-pipeline."
 }