chore(release): prepare @hasna/emails 1.3.12

[andrei-hasna]

Summary

• bump @hasna/emails from 1.3.11 to 1.3.12
• add a concise 1.3.12 changelog entry for the controlled production-send envelope merged in feat: add controlled production-send mutation envelope #212
• preserve the existing [Unreleased] SHA tripwire by using a versioned release section

Scope

Changed only:

• package.json
• CHANGELOG.md

Exact candidate

• base: bce6e7d50e02990d51ec1bb2fe0ac64e27211a41
• base tree: c473beb251acf2aef9682586f7a081d2d53ec719
• head: 522123fbf23ada6140577713d1b7390ba110a8c1
• head tree: 4f8a1a213fed5f9bf5f9c969091200c4f37dffe3

Validation

• package identity: 15 pass, 0 fail
• pack identity: 1 pass, 0 fail
• changelog workflow contract: 1 pass, 0 fail
• no-cloud source: 26 pass, 0 fail
• no-cloud pack: 712 text files / 12,461,872 bytes scanned, no markers
• typecheck: rc 0
• deployment workflow policy: pass
• full npm prepack dry run: rc 0
• dry tarball identity: @hasna/emails@1.3.12, 712 files
• staged secret scan: rc 0
• gitleaks staged and committed diff: no leaks found
• trailer gate: exactly one Agent: mamercus; zero Co-Authored-By

Review handoff

Parfit is the fixed reviewer after both implementation lanes hand off. This PR is intentionally left unmerged.

Refs: UST-00152
Parent: UST-00144

No publish, install, deploy, production-mail access, descriptor creation, or email send was performed.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[andrei-hasna]

[REVIEW] GO — #213 @ 522123f — lens: correctness+security+gates, reviewer unresolved-account001 (1 of 1)

Scope read:

• Verified HEAD 522123fbf23ada6140577713d1b7390ba110a8c1 against freshly fetched base origin/main at bce6e7d50e02990d51ec1bb2fe0ac64e27211a41.
• Read git log --oneline origin/main..HEAD, git diff origin/main...HEAD --stat, and the full diff of both changed files: package.json and CHANGELOG.md.
• Read surrounding manifest scripts and release metadata, plus the already-merged controlled-send CLI registration, descriptor/receipt implementation, and its regression tests named by the 1.3.12 changelog entry.
• Registry readback before disposition: npm view @hasna/emails version printed 1.3.11, so 1.3.12 is not already the current published version.

Commands and gates:

• bun install — exit 0; setup only, not a repository test gate; 324 packages installed.
• bun run test — exit 0; 4332 pass, 156 skip, 0 fail; 4488 tests across 290 files; 21276 expect() calls.
• This repository declares no typecheck script. No typecheck gate was invented or run.

Blocking P0/P1 findings: none.

The PR is metadata-only: package version 1.3.11 → 1.3.12 plus the matching changelog entry for main commit bce6e7d. It introduces no new runtime trust boundary. The declared hermetic test gate includes the controlled-send security and integrity cases and passed.

Non-blocking follow-ups: none.