Approve patch 0.1.1 deterministic Python wheel publication

[docushell-dev]

Summary

• Record the decider approval decision for the exact deterministic ethos-pdf==0.1.1 wheel candidate from the merged request record.
• Bind the decision to source commit 0c8ffe7db3b83896ab0be1c106bd1ec7de3cb278, deterministic build input SOURCE_DATE_EPOCH=0, package source commit d3e3953b99fbc74669f82ee56b753de7db6e63e4, and wheel SHA256 e0292276e711e75d4f7e1bb8c2c6137c6e89d4c343dd308943eb9b22094ea451.
• Add a release-candidate-prep guard so the decision stays indexed, source-bound, deterministic-input-bound, and upload-separated.

Boundary

• This PR does not upload to PyPI.
• Actual upload remains a separate operator action after merge and final pre-upload checks.
• Public installation wording remains blocked until PyPI availability closeout.
• Hosted surfaces, production positioning, Windows packaged artifacts, bundled project-maintained PDFium, public benchmark reports or claims, ethos-doc, and ethos-rag remain blocked.

Tests

• python3 .github/scripts/test_patch_0_1_1_python_deterministic_wheel_approval_decision.py
• python3 .github/scripts/test_patch_0_1_1_python_deterministic_wheel_approval_request.py
• python3 .github/scripts/test_patch_0_1_1_python_wheel_reproducibility_blocker.py
• python3 .github/scripts/test_release_candidate_prep.py
• python3 .github/scripts/test_milestone_e_source_snapshot_candidate_audit.py
• python3 .github/scripts/test_python_public_api_policy.py
• PYTHONPATH=python python3 -m unittest discover -s python/tests
• make light-check PYTHON=python3
• make release-candidate-prep PYTHON=python3
• git diff --check
• git diff --cached --check