DL-413

A half-relocked devenv lock blocks merge through a renovate:lock-integrity moon gate under renovate:ci, rolled into the required rollup. It re-fetches each checked locked node with a fresh nix cache and fails on any hash mismatch or unfetchable rev. renovate/artifacts is not made a required ruleset context.

Status: Active (Matt, 2026-10-06)