nx_ims_batch2_publish.nx

nx_ims_batch2_publish.nx -- land batch #2 LIVE through the GUARDED + VERSIONED publish path (vpub): first snapshot a content-addressed rollback version, then the A3 fail-closed guard must ALLOW before the NAS push runs. ADDITIVE. Publishes, in order: the re-emitted START hub (so its rendered tree's forward link to the new SUBSTRATE child is LIVE -> reachability=100), the re-emitted PRODUCTS hub (its prev/next + the product children's chain), then the new SUBSTRATE hub and the 6 new pages. The corpus set = EVERY slug any of these pages links to (all 20 wiki slugs); a missing slug => the guard rejects with PG_REJECT_DEAD_LINK (fail-closed), which is the safety property we want. REUSE (no publish/version/push substrate reinvented): nx_wiki_versioned_publish vpub. license_tier: ORIGINAL