feat(release): gate tags on scoped workflows

tools/release/push-release-tag.sh

@@ -493,6 +493,13 @@ run_version_alignment_gate() {
   run "${command[@]}"
 }
 
+run_manifest_shape_gate() {
+  run env PYTHONDONTWRITEBYTECODE=1 \
+    "$PYTHON" \
+    "$META_ROOT/tools/checks/check-manifest-shapes.py" \
+    --workspace-root "$PARENT"
+}
+
 run_migration_release_audit() {
   local audit_script="$META_ROOT/tools/release/release-migration-audit.py"
   local command=("$PYTHON" "$audit_script" "--track" "release")
@@ -841,6 +848,7 @@ for repo in "${REPOS[@]}"; do
 done
 
 run_migration_release_audit
+run_manifest_shape_gate
 
 confirm_release