Use WP Codebox v0.12.23

[chubes4]

Summary

Move native Docs Agent workflows and producer validation to immutable WP Codebox v0.12.23.

What changed

• Pinned reusable and validation workflows to v0.12.23 and immutable tag commit a2b02cd99ba645ba2250bf58c943bdd1eb13e690.
• Recorded all published release asset digests and extended the cross-repository contract to validate seed/host identity checks and retained rejected apply evidence.
• Updated workflow documentation for the v0.12.23 apply-back safety and evidence behavior.

How to test

1. Run php tests/validate-docs-agent-packages.php; expect Docs Agent native package and workflow contracts pass..
2. Run php tests/validate-external-native-package-sources.php; expect Immutable external package source contracts pass..
3. Run WP_CODEBOX_DIR=/Users/chubes/Developer/wp-codebox@main php tests/validate-wp-codebox-run-agent-task-contract.php; expect The exact v0.12.23 producer revision, workflow interface, apply-back identity, evidence, runtime, publication, and access contracts pass..
4. Run php tests/repair-docs-links-smoke.php; expect Documentation link repair smoke test passes..
5. Run actionlint .github/workflows/*.yml; expect All workflow files pass actionlint..
6. Run git diff --check; expect The patch contains no whitespace errors..

Compatibility

Consumer pin update only. Native package selection, runtime sources, provider/model defaults, writable paths, verification and drift commands, access, artifact declarations, and publication policy remain unchanged. Apply-back now gains v0.12.23 identity validation and retained failure evidence.

Evidence

• CI expected: Validate Docs Agent
• Reviewer-resolvable source evidence: Update native workflows to WP Codebox v0.12.23 #147
• docs-agent-packages: Passed
• external-package-sources: Passed
• workflow-lint: Passed
• wp-codebox-contract: Passed

AI assistance

• AI assistance: Yes
• Tool(s): OpenCode general coding and review subagents
• Model: openai/gpt-5.6-sol
• Used for: Updated and independently reviewed immutable WP Codebox workflow/release pins, published asset fixtures, apply-back contracts, and documentation; Chris reviews and owns the change.

Source relationships

• Closes Update native workflows to WP Codebox v0.12.23 #147