docs(delivery): establish single review authority

docs/40-deployment/heroku.md

@@ -148,6 +148,11 @@ There is no persistent staging environment. The `inkcre-core` pipeline contains
 two canonical production apps above; review apps exist only for an eligible pull request and
 are removed when it closes.
 
+The pipeline is intentionally not connected to a GitHub repository in Heroku. GitHub Actions
+is the only review-environment controller and couples each deterministic app through the
+Heroku Platform API. Reconnecting Heroku's legacy GitHub integration would create an
+all-events repository webhook and a competing review-app authority.
+
 The former `inkcre-core-staging` and `inkcre-pgrst` apps were deleted on 2026-07-24. Deleting
 the staging app also removed its Logtail addon and Better Stack drain. Neither app had a
 custom domain. GitHub no longer contains their staging environment or the all-events Heroku

tasks/peer-database-runtime-contract/audit.md

@@ -212,9 +212,10 @@ All retirement gates were satisfied on 2026-07-24:
 - core preview PRs #37 and #38 proved repository-qualified Neon/Heroku creation and exact
   close cleanup;
 - core production run `30091595400` passed after cleanup with both Eco peers ready;
-- the Heroku all-events hook, staging app, legacy PostgREST app, Logtail addon/drain, stale
-  GitHub environments, and unused repository secrets are absent; the historical OpenAPI
-  workflow registration is disabled;
+- the Heroku pipeline's legacy GitHub repository link and its all-events hook are absent, so
+  exact GitHub Actions controllers are the only review authority; the staging app, legacy
+  PostgREST app, Logtail addon/drain, stale GitHub environments, and unused repository secrets
+  are also absent; the historical OpenAPI workflow registration is disabled;
 - core Git `develop` and `staging` are absent; client-web has only protected `main`, while the
   retired long-lived branches remain recoverable through archive tags;
 - Neon `develop` is absent. The historical staging branch is storage-only under

tasks/peer-database-runtime-contract/packet.md

@@ -245,11 +245,11 @@ flowchart TB
 - Execution 08 uses `preview/core-py/pr-N` plus `inkcre-core-py-pr-N`, permits only trusted PRs
   targeting `main`, and proved exact creation and cleanup in real PRs #37 and #38. Production
   deploy run `30091595400` is green. Every Heroku web formation is Eco.
-- Execution 09 removed the core all-events Heroku webhook, stale GitHub environments and
-  OpenAPI registration, repository-level legacy secrets, core Git `develop`/`staging`,
-  client-web Git `develop` plus its obsolete Heroku branch, Neon `develop`, and the
-  `inkcre-core-staging`/`inkcre-pgrst` apps. Historical client branches remain reachable
-  through archive tags.
+- Execution 09 removed the Heroku pipeline's legacy GitHub repository link and all-events
+  webhook, stale GitHub environments and OpenAPI registration, repository-level legacy
+  secrets, core Git `develop`/`staging`, client-web Git `develop` plus its obsolete Heroku
+  branch, Neon `develop`, and the `inkcre-core-staging`/`inkcre-pgrst` apps. Historical client
+  branches remain reachable through archive tags.
 - Neon staging storage is retained only as
   `archive/staging-lineage-20250824` without a compute endpoint: Neon forbids deleting an
   ancestor of the retained pre-cutover checkpoint and production lineage. No active address