feat(saas): enforce signed release evidence and verified deployments

package.json

@@ -11,7 +11,10 @@
     "publish": "cool saas-model finalize",
     "start": "node bootstrap.js",
     "start:local": "cross-env NODE_ENV=local SAAS_RUNTIME_BOOTSTRAP_LOCAL_FALLBACK_ENABLED=true node bootstrap.js",
-    "verify:packages": "node scripts/verify-local-packages.cjs"
+    "verify:packages": "node scripts/verify-local-packages.cjs",
+    "start:frozen": "node start-frozen.js",
+    "start:stable": "node start-stable.js",
+    "test:stable": "node --test test/start-stable.test.cjs"
   },
   "coolSaas": {
     "lifecycle": {
@@ -33,7 +36,7 @@
     "typeorm": "npm:@cool-midway/typeorm@0.3.20"
   },
   "devDependencies": {
-    "@cool-midway/core": "8.0.12",
+    "@cool-midway/core": "8.1.0",
     "@types/node": "22.10.7",
     "cross-env": "^7.0.3",
     "mwtsc": "^1.16.0",