feat(components): orchestrate signed extension registries

CHANGELOG.md

@@ -9,6 +9,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
+- Added pinned-root TUF registries for external Use packages, including full
+  metadata refresh, review/apply-bound install plans, signed provenance
+  receipts, and source-preserving upgrades. Registry upgrades query only the
+  recorded registry and channel, reject identity drift and version downgrades,
+  and converge without downloading an already installed target.
+- Added deterministic component operation plans, cross-process component
+  locks, immutable plan digests, and preflight checks so reviewed installs,
+  upgrades, and removals fail before payload download or mutation when their
+  inputs change.
 - Added policy-aware A3S Use preparation to Code TUI startup. A missing Use
   component is installed from its verified release before terminal takeover
   when networking and automatic setup are allowed; offline mode and
@@ -18,6 +27,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
+- Reject symbolic-link, non-regular, replaced, or hard-linked component lock
+  files before truncation, and reject symbolic-link lock directories, so a
+  crafted runtime path cannot redirect cross-process lock writes.
 - Wait for the initial A3S Use MCP projection within a separate bounded startup
   budget, so the first model turn receives ready Use routes through `task`.
   Slow or broken surfaces remain non-fatal and continue converging in the