golden 0.298.0 baked (pinned Docker set; the first unpinned bake replaced before any vouch); golden gate test on the gate's UTC clock; bake runbook names GOLDEN_DOCKER_PKGS

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

scripts/CHANGELOG.md

@@ -1,3 +1,10 @@
+## gates — the golden gate's test reads the gate's own clock (2026-10-06, fixed without a row)
+
+- `test_golden_currency_gate.py` took „today" from the LOCAL date while `golden_currency_gate.read_waiver` uses UTC; between
+  00:00 and 02:00 CEST CASE 7 (an expired waiver) read VALID and the suite went red — found at 00:45 by the pre-push hook.
+  The test now uses UTC; red-proved (back to the local date: CASE 7 fails, `EXPIRED on 2026-10-06` wanted, rc=0 got).
+- `RUNBOOK-manual-build.md` §4.1: the bake's runner script names `GOLDEN_DOCKER_PKGS` (the 0.298.0 bake missed it once).
+
 ## felhom-host-install.sh 1.32.0 — the uninstall leaves nothing that holds a secret or a tunnel; pre-flight tells the truth (burn-down night, 2026-10-05; NOT published — ships with the tag `installer-v1.32.0`)
 
 - **R-275:** the uninstall removes the agent's config directory with every copy of the config in it (the `.bak*` glob

scripts/test_golden_currency_gate.py

@@ -189,7 +189,9 @@ def waiver(issued, expires, reason="pre-customer development; weekly cadence", r
 
 def waiver_cases():
     fails = []
-    today = datetime.date.today()
+    # The gate's clock is UTC (golden_currency_gate.read_waiver). A LOCAL date here disagreed with it between
+    # 00:00 and 02:00 CEST and turned CASE 7 red (found 2026-10-06 00:45, the burn-down night).
+    today = datetime.datetime.now(datetime.timezone.utc).date()
     d = lambda n: (today + datetime.timedelta(days=n)).isoformat()
     BEHIND = (["9.9.9", "9.9.8", "9.9.7"], "9.9.7")       # released 9.9.9, golden 9.9.7: two behind
     UNRECORDED = (["9.9.9", "9.9.7"], "9.9.8")             # golden 9.9.8 has no heading (R-385)