refactor: drop the pre-rename operator control fallback

[loadinglucian]

php-bin main now carries only .github/autorelease-operator.json, so both fallback branches are unreachable. Removes the fallback the rename PR said to drop once php-bin landed.

Summary by CodeRabbit

• Improvements
  • Streamlined automated release validation by using a single, standardized policy source.
  • Improved consistency when checking release readiness and policy compliance.
  • Removed reliance on legacy policy locations and fallback behavior.

[cursor]

Bugbot couldn't run - usage limit reached

Bugbot is counted against Cursor usage for this user or team, and this run hit a usage or spend limit.

A user or team admin can review and increase usage limits in the Cursor dashboard.

(requestId: serverGenReqId_eeada897-e652-4d5f-a5bf-77d06ba49e46)

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5fa3ee8e-559f-4b42-90ec-3c9858c019a3

📥 Commits

Reviewing files that changed from the base of the PR and between 91f8c49 and 71da60f.

📒 Files selected for processing (3)

• .github/workflows/autorelease-consumer.yml
• autorelease/consumer.py
• test/test_autorelease.py

---

📝 Walkthrough

Walkthrough

The consumer now fetches only commit-pinned autorelease policy invariants. The workflow now reads only the renamed autorelease operator file. Tests remove legacy fallback coverage and validate the single policy URL.

Changes

Autorelease path enforcement

Layer / File(s)	Summary
Policy URL and fetch contract autorelease/consumer.py, test/test_autorelease.py	pinned_policy_urls returns one commit-pinned invariants URL. Policy fetching calls fetch_url directly. Tests validate the current URL and retain rejection of non-commit references.
Workflow operator-control loading .github/workflows/autorelease-consumer.yml	The investigation checkout and merge-readiness step use only .github/autorelease-operator.json.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• Bigpixelrocket/mise-php#21: Reverses fallback behavior in the consumer, workflow operator loading, and related tests.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description explains the change but omits the required Verification and Security sections and their checklist items.	Add the Verification and Security sections, and report test results and security confirmations for the listed checklist items.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly describes removal of the pre-rename operator control fallback.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch refactor/drop-operator-path-fallback

---

_{Comment @coderabbitai help to get the list of available commands.}