docs(tracker): ceremony done 2026-07-02, version decided 1.8.0-alpha, note quadlet false-drift fix

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docs/UNIFIED-TASK-TRACKER.md

@@ -137,7 +137,12 @@ those are marked ✅ below with the commit that did it, so we stop re-litigating
     not user-stopped → reset-failed + start, with backoff.
   - Already landed, don't re-do: boot-reconciler circuit breaker (2026-07-01),
     indeedhub crashloop fix (2026-07-01), async blocking-Command pass (`4c75bb3d`,
-    removes executor stalls that made the API janky under reconcile load).
+    removes executor stalls that made the API janky under reconcile load),
+    quadlet entrypoint-split false-drift fix (2026-07-08 — `container_command_drifted`
+    compared entrypoint/cmd halves separately, but quadlet folds `sh -lc` into
+    `Entrypoint=sh` + `Exec=-lc …`, so every quadlet-created app with a
+    multi-element entrypoint read as permanently drifted; electrumx on .228
+    recreated 114×/6h until the comparator was switched to concatenated argv).
   - Perf polish riding along: 93 MB frontend dist shrink (hardening plan §D 🟡).
 - [ ] **Developer tooling CLI suite** (validate/render/local-install/lifecycle-test) —
       APP-PACKAGING-MIGRATION-PLAN.md step 5, needed before external devs can publish.
@@ -212,13 +217,12 @@ those are marked ✅ below with the commit that did it, so we stop re-litigating
 
 ## Tier 3 — Blocked on a decision or resource only you can supply
 
-- [ ] **Version naming decision (1.7.99-alpha → 1.8.0 vs 1.8.00-alpha)** — code is
-      otherwise ready to tag; this is a one-line decision, then a mechanical bump +
-      tag + push. **Needs your call**, not more engineering.
-- [ ] **Workstream B signing ceremony** — `core/archipelago/src/trust/anchor.rs:21`
-      still has `RELEASE_ROOT_PUBKEY_HEX = None`. Needs the offline
-      `RELEASE_MASTER_MNEMONIC` to run `docs/workstream-b-signing-runbook.md`'s
-      4-step ceremony — can't be automated by me.
+- [x] ~~Version naming decision~~ — **decided 2026-07-08: `1.8.0-alpha`.** Remaining
+      work is the mechanical bump + tag + push once the pre-tag items above close.
+- [x] ~~Workstream B signing ceremony~~ — **done 2026-07-02.** `anchor.rs` pins
+      `RELEASE_ROOT_PUBKEY_HEX = 5d15cbee…9951` (signer
+      `did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur`); mnemonic held
+      offline per `docs/workstream-b-signing-runbook.md`.
 - [ ] **Bitcoin multi-version fleet-wide OTA** — `.228` fully working on branch,
       per your prior gating this rollout is explicitly held for your decision on
       timing (`docs/bitcoin-version-bulletproof-rollout.md`).