Allow the non-root Gradle builder to create project-local caches during reproducible image builds.
Split replacement-key recreation so MySQL drops the old constraint before validating its reused name.
Make deployments pull immutable CI-built images while keeping test failures diagnosable before any package is published.
Provide the production foundation for Apple identity, immutable credits, referrals, integrity checks, managed providers, and hardened Docker deployment.