Summary

• add an opt-in Cargo inherited-version lock synchronization step to the shared Changesets workflow
• validate the incoming lock before minting a write-capable token
• run the pinned synchronizer inside the same version transaction before the generated commit
• document the caller contract

Validation

• shared Cargo synchronizer tests (7/7)
• workflow YAML parse
• generated version-wrapper bash -n
• git diff --check
• real drift repair smoke against the prior anonymize release fixture

CC on behalf of @jan-kubica