docs(genie): replace the dead v4 release recovery section

[automagik-genie]

The Recovery section of genie/_internal/runbooks/release-pipeline.md documented a v4-era escape hatch that no longer exists: gh workflow run sign-attest.yml --field run_id=... followed by gh workflow run release-publish.yml --field run_id=....

Both workflows are workflow_call-only today. release-publish.yml states it directly: "All artifacts are from one workflow run; there is no standalone dispatch or external run-id recovery path." Following the old runbook produces nothing but a confusing dispatch error during an incident.

This replaces it with the rules that actually hold, verified against version.yml, release.yml, sign-attest.yml and release-publish.yml on automagik-dev/genie@dev:

• Transient failure inside one attempt — gh run rerun <run-id> --failed, but prefer re-running the whole run: the stable security gate requires every artifact's endorsement to name the same signer run, and mixing attempts fails it with verified signer run disagreement.
• A dev release whose tag is already pushed — it cannot be republished. version.yml allocates a fresh build number and pushes commit + tag with one git push --atomic before it ever calls release.yml, so any re-run is rejected and stops at release-race.next-tag-pin-skipped.detected. The remedy is landing any commit on dev through a normal PR; the orphan tag is already acknowledged by the Release Orphan Alert issue.
• Stable — never auto-dispatched. version.yml pushes the promotion tag and prints the release.yml inputs; a maintainer dispatches Release with channel=stable (the only channel manual dispatch offers) and a different maintainer approves the protected production environment.

Internal page (_internal/), so it is excluded from the public Mintlify build.

🤖 Generated with Claude Code

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: c8c3eeac-6453-499e-b898-cd2d4266fc22

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}