* fix(ci): pin v6.11 SwiftFormat contract
Adapt the frozen-target SwiftFormat 0.61.1 pin and checksum from 7772d798dd and ce671c3513, with bounded download behavior from e0394c2ab4. Avoid formatting native sources or importing native runtime changes into the npm-only maintenance candidate.
* fix(release): load no-write images without attestations
Apply the validation-only Docker exporter fix from 69f8198ba3 (#103891): local --load exports cannot carry SBOM/provenance manifest lists. Registry-published images remain out of scope.
* fix(release): restore frozen validation startup
Adapt the no-write validation portion of b597a8d364 (#103834) for the 6.x extended-stable workflow set. Remove validation-owned image publisher jobs instead of granting write permissions; Docker publication remains out of scope.
* fix(release): allow canonical extended-stable checks
Restore the openclaw-release-checks.yml portion of c7810fc697 (#99352) that authorizes the canonical extended-stable/YYYY.M.33 workflow branch.