build(catalog): expose production publishing workflow

Add small Justfile entry points for generating the complete production
catalog authority or safely regenerating one game. Keep fixture validation
separate and allow operators to select a trusted unrar executable.

Document the complete package layout, BLAKE3 and ContentId model,
full/incremental publication procedure, verification and bundle gates, and
peer-CLI workflows. Record the fresh final local acceptance run without
presenting Docker throughput as physical-LAN evidence.

Test Plan:
- just fixture-catalogs-check
- just test
- just clippy
- just frontend-test
- just build
- LANSPREAD_S37_MIN_MIB_PER_S=100 just peer-cli-tests
- just catalog-check-production (expected fail-closed: production manifests absent)
- deno fmt --check README.md organize/testing/PEER_CLI_SCENARIOS.md
- rumdl check --flavor commonmark README.md organize/testing/PEER_CLI_SCENARIOS.md
- just --fmt --check
- git diff --check

organize/testing/PEER_CLI_SCENARIOS.md

@@ -149,6 +149,22 @@ Use S39-S47 to pin down low-disk streamed installs:
 
 ## Run Log
 
+### 2026-08-12 - Final local acceptance refresh
+
+- A fresh-image `LANSPREAD_S37_MIN_MIB_PER_S=100 just peer-cli-tests` run passed
+  every scenario from S1 through S49. S37 transferred and verified the exact
+  `2,147,483,656` bytes in 17 chunks over `3.487s`, reporting `587.33 MiB/s` and
+  `4926.92 Mbit/s` against the active 100 MiB/s floor. These are Docker
+  acceptance measurements on this host and storage, not representative
+  physical-LAN performance evidence.
+- On the same source tree, `just test` passed all 708 workspace tests (including
+  480 peer and 56 Tauri tests), `just clippy` passed with warnings denied,
+  `just frontend-test` passed 91/91, `just fixture-catalogs-check` passed, and
+  `just build` passed the default fixture gate plus the Deno/Vite and
+  release-mode Tauri build. `just catalog-check-production` separately failed
+  closed because the external production manifest corpus is absent; no fixture
+  authority was accepted as a production substitute.
+
 ### 2026-08-10 - Phase 5 Unfiltered Acceptance
 
 - A fresh-image `LANSPREAD_S37_MIN_MIB_PER_S=100 just peer-cli-tests` run passed