Release 2.11.0 step 2: merge v2/main into main and cut the release #2718

Summary

Merge v2/main into main for the v2.11.0 milestone, smoke-test the release candidate from the production build, and cut the GitHub Release that triggers publishing.

Step 1 is #2716: v2/main reads 2.11.0 and carries the release audit.

Scope

• A milestone-merge branch cut from origin/main, taking v2/main whole — no commits of its own. The merge commit's tree must be byte-identical to origin/v2/main.
• npm run local:gate in a dedicated worktree with a full npm install, and npm run pack:verify as its own step (The release skill says pack:verify runs inside local:gate; it does not #2380).
• A hand-driven smoke of every contribution closed in the milestone, from the production build, through whichever clients each change touches.
• A ledger artifact recording what was driven and what was observed, linked from the PR for maintainer review.
• After merge: assemble notes with npm run release:notes, then publish the Release with the bare 2.11.0 tag (no v prefix) on origin/main.

If the smoke finds something

The fix goes on v2/main, never on the merge branch — an ordinary PR against v2/main, then re-merge into the merge branch so it arrives the way everything else did.

Acceptance

• Merge commit tree hash == origin/v2/main tree hash
• npm run local:gate and npm run pack:verify pass on the merge branch
• Every closed milestone issue driven and recorded in the ledger
• Ledger artifact published and linked from the PR
• Release tagged 2.11.0 on origin/main and published