Follow-up hardening from review:
- check_prebuilt_freshness: guard a non-dict marker and a non-string
source the same way effective_published_repo does, so a corrupt
on-disk UNSLOTH_PREBUILT_INFO.json cannot crash update-status polling.
- Data-center lemonade gate: skip on macOS explicitly. macOS never has
AMD ROCm, so a stray forwarded gfx must keep the macOS bundle path.
- Tests: Windows data-center routing (windows-hip + windows asset),
draft/prerelease filtering in the release scan, and a direct
effective_published_repo matrix including corrupt-marker fail-safes.