fix(track-a): promote canonical Xvfb DRI provider repair

[blakinio]

Coordinator current-main promotion replay for hosted implementation Draft #423.

Base: main@acbc05866b6abec471425822a57c3bcf47c0edd5, after the causal Xvfb DRI-path proof was promoted and archived by #427/#428.
Source implementation: #423@1496fc83ee92326ebd2a1f9da06a926d50f7d040.

The canonical session worker and its tests are replayed by exact source blob SHA. Direct blob comparison proves the corresponding current-main source/test blobs are unchanged from #423's trusted merge base, so this replay applies only the audited DRI-path repair without stale branch history. The source evidence/task are also replayed exactly.

Coordinator audit result: ACCEPT. The worker fail-closes unless the selected toolroot has a contained real DRI directory and swrast_dri.so resolves to a regular file inside that DRI directory/toolroot; only Xvfb receives LIBGL_DRIVERS_PATH, the Xvfb argument list remains unchanged, and the official-client environment does not receive the variable. Dedicated hosted validation 31966128631 / job 95211462614 passed session 14/14, transition 9/9, guard 3/3, lease 14/14 and source-contract checks. Source final governance 31966417003 and CI 31966417334 / CI / Required 95212359032 are green.

No Synology/client/canonical-runtime execution occurs in this promotion. Physical revalidation remains a later RUNTIME gate and cannot run until this repair is merged/archived and fresh Track A admission is satisfied.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

[blakinio]

Coordinator budget checkpoint / safe stop. Current exact head remains 146ded11240281f2517572ea47b948bba8f193b3; pre-ready Track A governance 31967657045=SUCCESS and CI 31967657142=SUCCESS with CI / Required job 95215375125=SUCCESS; source #423 is closed superseded; review threads were 0; main was acbc05866b6abec471425822a57c3bcf47c0edd5 at the last merge-gate read. Marking this PR ready created a new ready-state CI generation 31967796354, observed only at generation creation as IN_PROGRESS. Per ANTI_STALL_AND_EXECUTION_BUDGET.md, this owner invocation has exhausted the allowed additional-task budget, so no further polling, merge, archive PR, canonical runtime action, or new physical task is started here. NEXT_ACTION for a fresh invocation: inspect ready-state CI 31967796354 once; if CI / Required is SUCCESS on unchanged head and main remains compatible with zero unresolved threads, squash-merge #429, archive/release OTC-20260816-track-a-canonical-xvfb-dri-path-fix, and keep canonical bootstrap blocked (mutation_authorized:false).