Why: the parent must pin the merged component SHAs for the combined build and CI gates. Evidence: both origin-main merge commits fetched post-merge and checked out. Impact: gitlink updates only. Refs: backend PR #141; documents PR #64.
ui
@ 76d6633736