ci(release): scope the post-version check to a shape assertion + the gates that read it

Replaces the first draft's derive-and-run selector. Feeding the change set to
scripts/pm/dispatch-gates.mjs named 49 families and ran 44 of them green in
113 s, but running the tool in CI needs check-self-test-wired.mjs to grow a new
ledger shape, and check-dispatch-gates.mjs already records the reviewed position
that the live derivation has no verdict for CI to hold. That is a maintainer's
call, not a rider on this card.

What ships instead is two halves: a shape assertion that resolves the doc and
template surfaces at run time from the declarations the rewriters themselves
read (cut-rc.yml's idiom, same predicate), so a new version-time output reddens
this lane on the day it lands; and the eight gates whose corpus is what the
version step actually writes, measured at 7 s.

Also corrects this job's comment, which called `pnpm run version` three
rewriters after #9064 made it four.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015ahemw8RcTgqtxrj15PEZx

Author: claude