journal: three pending weekly-run PRs unblocked (keycloak/mailu re-verified, discourse basefloor fix merged)

cc-ci-plan/JOURNAL.md

@@ -828,3 +828,17 @@ session cc-ci-orchestrator-stale can be killed; recipe-mirrors org still private
 - OPEN: harness canonical-baseline 404 (keycloak/mailu re-verify after fix); confirm ds4-pro
   subagent config on next run; mattermost-lts 11.9.0 is innovation-release (EOL 2026-10-15) —
   operator decides ESR vs innovation.
+
+## 2026-08-04 ~18:00 UTC — all three pending weekly-run PRs unblocked (operator ask)
+- keycloak #5: harness canonical-baseline 404 NOT reproducible post re-activation; repro build
+  #1199 full green; cc-ci/testme=success reflected. mailu #6: re-verify #1200 hit a cold-pull
+  900s deploy timeout, retry #1202 green; reflected. (Missing-runs-dir anomaly = install-stage
+  failure artifact, not a runner bug.)
+- discourse #6: TWO stale-test roots fixed in cc-ci PR #15 (MERGED, verified level 5/5 paired
+  with the recipe PR head): (1) new UPGRADE_BASE_FLOOR recipe_meta key + resolver support —
+  excludes structurally-invalid upgrade bases (0.8.x bitnami family) while resolution stays
+  dynamic; declared skip when nothing ≥ floor; (2) the upgrade faithfulness test's hardcoded
+  discourse/discourse:3.5.3 pin → version-agnostic official-family assertion. Never-weaken held.
+- Debug gitea tokens minted for the drone triggers all deleted (ids 55-57); the two 401s during
+  verification were transient git.autonomic.zone blips (sops bridge token verified valid, 200).
+- Operator review queue: keycloak #5, mailu #6, discourse #6 all green + reflected.