Read Website Release Safety

Read release-safety state without changing a managed website. It reports the available source revision and dirty/untracked state, automatic snapshot repository and latest scoped snapshot, whether that snapshot contains source and generated output, and a conservative disk preflight. It never builds, publishes, restores, creates a Git tag, cleans files, or reads file contents or secrets. It reports unavailable revision/tag guarantees instead of treating a snapshot as proof.