Release-candidate for 3.1.1 — validates the verify-before-publish gate on a real tag pipeline. Not a release.
