feat(deploy): promote publish-path provider authority

infra/deploy-runner/build-engine-provider-authority-diagnostics-artifact.mjs

@@ -24,7 +24,7 @@ if (extra.length || !/^engine-provider-authority-diagnostics-\d{8}-\d{3}$/.test(
 
 const targetSha256 = Object.freeze({
   "nodedc-source/server/dataProductPublishGrant/providerCatalog.js":
-    "1a14299167ebe17efd677fa3c59b84c80e12d6846bac6f40f9bcae0729ab22c6",
+    "86e23683054860bb21b47e4e60a13db741088ee214a60704fd4fd24a49ea5852",
 });
 const entries = Object.freeze(Object.keys(targetSha256));
 const artifact = join(artifactRoot, `nodedc-${patchId}.tgz`);
@@ -59,9 +59,9 @@ try {
     entries,
     targetSha256,
     services: ["nodedc-backend"],
-    transition: "exact-safe-provider-authority-reason-codes",
-    providerPackage: "gelios.provider.v4",
-    dataProductId: "fleet.positions.current.v3",
+    transition: "publish-path-scoped-provider-request-authority",
+    providerPackages: ["gelios.provider.v7", "gelios.provider.v8"],
+    dataProductIds: ["fleet.positions.current.v5", "fleet.units.profile.current.v1"],
     credentialValues: "preserved",
     untouched: ["L2 graph", "n8n", "L1", "Engine UI", "databases"],
   }, null, 2));
@@ -90,6 +90,8 @@ async function assertExactSources() {
       "publish_grant_provider_transport_policy_not_exact",
       "publish_grant_provider_request_path_unreachable",
       "publish_grant_provider_credential_identity_mismatch",
+      "exactRequestMatches",
+      "reachableRequestNodes",
     ]) {
       if (!source.includes(marker)) {
         throw new Error(`engine_provider_authority_diagnostics_marker_missing:${marker}`);