Release Notes snippet — Scanner Determinism

Determinism score: {{overall_score}} (threshold {{overall_min}}); per-image summary:
- {{image_digest}} → score {{score}} ({{identical}}/{{runs}} identical)
- {{next_image_digest}} → score {{score}} ({{identical}}/{{runs}} identical)
Inputs: policy {{policy_sha}}, feeds {{feeds_sha}}, scanner {{scanner_sha}}, platform {{platform}}.
Evidence: attached determinism.json + artefact hashes (DSSE-signed, offline-ready).
Actions: rerun harness with stella detscore run --bundle determinism.json if score < threshold; block promotion until pass.