fix(plugin-security): choose the platform-admin promotion target instead of sampling it — order the candidate read server-side and prefer the declared owner #5990
os-trumpsingle-claim-path-guard.yml
on: pull_request
No other open PR may claim the same single-writer path
16s