feat(saas): enforce signed release evidence and verified deployments

package.json

@@ -14,7 +14,8 @@
     "test:stable": "node --test test/start-stable.test.cjs",
     "test:business": "node --test test/goods-business-input.test.cjs",
     "start:local": "cross-env NODE_ENV=local SAAS_RUNTIME_BOOTSTRAP_LOCAL_FALLBACK_ENABLED=true node bootstrap.js",
-    "verify:packages": "node scripts/verify-local-packages.cjs"
+    "verify:packages": "node scripts/verify-local-packages.cjs",
+    "start:frozen": "node start-frozen.js"
   },
   "coolSaas": {
     "lifecycle": {
@@ -37,7 +38,7 @@
     "typeorm": "npm:@cool-midway/typeorm@0.3.20"
   },
   "devDependencies": {
-    "@cool-midway/core": "8.0.12",
+    "@cool-midway/core": "8.1.0",
     "@types/node": "22.10.7",
     "cross-env": "^7.0.3",
     "mwtsc": "^1.16.0",