* ci: serialize main and bound sticky caches * fix(ci): pin cache warmer to validated SHA * fix(ci): read current sticky retirement manifest