pipeline v5.3.0 Fail-closed Renovate automerge gate (L1 verdict contract): osv-verdict, cargo-verdict, automerge-gate. cargo-verdict added on estate evidence (0.x caret-breaking crate bumps dominate the backlog; OSV cannot catch a build/test break). Image pins synced to v5.3.0.