ci(signing): trust glaeda runner hook 5d5ce6e8
glaeda pins these runner hooks (glaeda-disk's CMUX_NEXT_DRAIN_HOOK_SHA256), and scripts/ci/glaeda-signing-hooks.txt does not list them yet. Until it does, owned-Mac signing jobs on minis that run them fail their claim gate, and each run's Blacksmith twin signs.
5d5ce6e83393f6412d09d76bcb211fb454afd639f274258a619810fef0644cd1: glaeda e3582de4: runner-hook: a lock holder keeps its locks while its owner's start token is unreadable (#1763)
Check before landing: each sha is the sha256 of scripts/glaeda-cmux-runner-hook at a reviewed glaeda main commit, and that hook still waits out an earlier job's leftover processes and gives signing jobs the exclusive claim. tests/test_ci_signing_owned_mac.py checks that every listed sha is a glaeda pin.
Written by cmuxterm-hq .github/workflows/fleet-reconciler-glaeda-signing-hooks.yml (tools/fleet-reconcilers/glaeda_signing_hooks_sync.py). It updates this branch when glaeda pins another hook, and never merges.
![View with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/view-with-codesmith-dark-v3-3x.png)
![Autofix with [code]smith](https://pr-comments-assets.blacksmith.sh/codesmith/autofix-with-codesmith-dark-3x.png)
Need help on this PR? Tag @codesmith-bot with what you need.
Summary by cubic
Trusts glaeda runner hook 5d5ce6e8 by adding its sha256 to scripts/ci/glaeda-signing-hooks.txt. Without it, owned-Mac signing jobs on minis running this hook fail their claim gate, and each run's Blacksmith twin signs.