chore: prepare 0.7.25 so hardened packages publish consistently

[georgepwall1991]

Verdict

Ready for exact-head release validation: synchronizes both packages, the embedded README, the .NET 8 fixture, health evidence, and the full v0.7.24..HEAD changelog at 0.7.25.

Evidence

• Release-mode CI build: 0 warnings, 0 errors.
• Full suite: 1,087 passed (775 analyzer/fixer, 303 core, 9 tool).
• Formatter and exact CFG001-CFG009 showcase contract passed.
• ConfigContraband 0.7.25 and ConfigContraband.Tool 0.7.25 packed successfully.
• Package versions, analyzer payloads, embedded README, and packed-tool help/generation/current/stale/load-failure paths passed.
• Embedded README install command names 0.7.25.
• Codex review initially blocked incomplete release history and stale README; both were corrected.
• Final Codex review --uncommitted: no actionable findings after independent full verification.
• Different-model/Claude review: explicitly waived by user; not represented as passed.

Next action

Merge only after exact-head build, Analyze C#, CodeQL, and Codecov patch checks pass; then publish v0.7.25 from the exact merged main SHA.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!