fix(etl): rebuild highlights after fallback

[Sam-24-dev]

Summary

• rebuild home_highlights.json from the final bridge JSONs after Reddit fallback restoration
• keep both frontend/assets/data and datos/metadata/remote_assets consistent
• extend the bridge integrity gate to validate the deploy-time remote asset root

Root cause

Scheduled run 34131946862 generated Home highlights during sync_assets, then restored the canonical Reddit topic/intersection bridges afterward. Home was not rebuilt, so the integrity gate correctly rejected stale embedded Reddit summaries and blocked publication.

Why this ordering is safe

The new step runs only on the existing Reddit fallback condition, immediately after the final bridge restore and before the integrity/freshness gates. It reuses build_home_highlights_payload and writes only home_highlights.json; it does not rerun the full exporter or read stale CSV inputs.

Asset roots

• compact frontend assets: frontend/assets/data
• full deploy artifact assets: datos/metadata/remote_assets

The fallback restore and integrity gate now cover both roots.

Validation

• TDD RED: 4 focused regression tests failed for the missing rebuild, remote restore, remote gate, and workflow ordering
• python -m pytest -q — 230 passed
• focused regression suite — 45 passed
• ruff check ... — passed
• python -m compileall -q backend scripts tests — passed
• YAML parse — passed
• bandit -q -ll ... — passed
• git diff --check — passed
• detect-secrets scan <staged files> — no findings
• flutter test — 145 passed
• flutter analyze — no issues
• flutter build web --wasm --no-wasm-dry-run --no-web-resources-cdn ... — passed

Non-goals

• no ETL run, workflow dispatch, data publication, deployment, or schedule/freshness change
• no dependency changes and no changes to PRs chore(deps): bump the github-actions group across 1 directory with 3 updates #103 or chore(deps): bump the python-dependencies group across 1 directory with 4 updates #108
• no local Sunday automation fix

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.