feat(canon): M1.3 enroll all 21 used-recipes as data-warm canonicals (§2.B)

WARM_CANONICAL=True added to every recipe in cc-ci-plan/used-recipes.md (20 weekly +
uptime-kuma external). enrolled_recipes() now returns all 21. Test fixtures
(custom-html-*-bad, concurrency, regression) intentionally left unenrolled.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

tests/bluesky-pds/recipe_meta.py

@@ -20,3 +20,7 @@ EXPECTED_NA = {
     "pds:0.4, which upstream republished with incompatible main builds (index.js removed) — "
     "re-enable via UPGRADE_BASE_VERSION once a fixed version is published post-merge",
 }
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/cryptpad/recipe_meta.py

@@ -13,3 +13,8 @@ def EXTRA_ENV(ctx):
     (covered by the wildcard cert, so no cert work)."""
     label, _, rest = ctx.domain.partition(".")
     return {"SANDBOX_DOMAIN": f"{label}-sb.{rest}"}
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/custom-html-tiny/recipe_meta.py

@@ -14,3 +14,7 @@ EXPECTED_NA = {
     "backup_restore": "stateless static file server: serves an ephemeral content volume seeded at "
     "deploy, with no persistent/user data to back up or restore (no backupbot.backup label)",
 }
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/discourse/recipe_meta.py

@@ -70,3 +70,8 @@ def BACKUP_VERIFY(ctx):
     except Exception:  # noqa: BLE001 — exec fails if the db is mid-cycle: treat as not-yet-captured
         return False
     return out.isdigit() and int(out) > 0
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/drone/recipe_meta.py

@@ -14,3 +14,7 @@ HTTP_TIMEOUT = 600
 # install_steps.sh (which wires GITEA_CLIENT_ID + GITEA_DOMAIN + client_secret into drone's env
 # and compose), then deploys drone once with SCM already configured.
 DEPS = ["gitea"]
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/ghost/recipe_meta.py

@@ -73,3 +73,8 @@ def BACKUP_VERIFY(ctx):
     except Exception:  # noqa: BLE001 — exec fails if the db is mid-cycle: treat as not-yet-captured
         return False
     return out.isdigit() and int(out) > 0
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/gitea/recipe_meta.py

@@ -137,3 +137,8 @@ def EXTRA_ENV(ctx):
         # Tell abra's secret generator which version to use for lfs_jwt_secret.
         env["SECRET_LFS_JWT_SECRET_VERSION"] = "v1"
     return env
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/hedgedoc/recipe_meta.py

@@ -4,3 +4,7 @@ HEALTH_PATH = "/"
 HEALTH_OK = (200, 302)
 DEPLOY_TIMEOUT = 600
 HTTP_TIMEOUT = 300
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/immich/recipe_meta.py

@@ -10,3 +10,7 @@ HEALTH_OK = (200, 301, 302)
 # immich-server boots the API + web + (first-run) machine-learning model fetch; allow a wide window.
 DEPLOY_TIMEOUT = 1500
 HTTP_TIMEOUT = 600
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/keycloak/recipe_meta.py

@@ -6,3 +6,7 @@ DEPLOY_TIMEOUT = (
     900  # JVM + DB migration are slow on a 2-vCPU VM; observed 502 fallback up to ~10min
 )
 HTTP_TIMEOUT = 900
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/lasuite-docs/recipe_meta.py

@@ -21,3 +21,8 @@ def EXTRA_ENV(ctx):
     # minio, postgres18, redis, docspec, y-provider). Cold pulls exceed 300s -> "deploy timed out 🟠".
     # Bump it so the harness deploy waits long enough; verified the stack converges 9/9 once pulled.
     return {"TIMEOUT": "900"}
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/lasuite-drive/recipe_meta.py

@@ -60,3 +60,8 @@ def EXTRA_ENV(ctx):
         # convergence; kept under DEPLOY_TIMEOUT (1800) so Python never kills abra mid-wait.
         "TIMEOUT": "1500",
     }
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/lasuite-meet/recipe_meta.py

@@ -35,3 +35,8 @@ def EXTRA_ENV(ctx):
         # a cold image cache; bump it (kept under DEPLOY_TIMEOUT so Python never kills abra mid-wait).
         "TIMEOUT": "1000",
     }
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/mailu/recipe_meta.py

@@ -30,3 +30,8 @@ def EXTRA_ENV(ctx):
         "SITENAME": "ccci-mail",
         "POSTMASTER": "admin",
     }
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/matrix-synapse/recipe_meta.py

@@ -14,3 +14,7 @@ HTTP_TIMEOUT = 600
 # register endpoint via `exec_in_app` (curl localhost from inside the container) — that path
 # bypasses the public router and does NOT require ENABLE_REGISTRATION to be true.
 EXTRA_ENV = {"TIMEOUT": "900"}
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/mattermost-lts/recipe_meta.py

@@ -46,3 +46,8 @@ def SCREENSHOT(page, ctx):
     with contextlib.suppress(Exception):
         page.click("text=View in Browser", timeout=3_000)
         screenshot_mod.settle(page, 8_000)
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/mumble/recipe_meta.py

@@ -68,3 +68,8 @@ def READY_PROBE(ctx):
     if "compose.host-ports.yml" in cf:
         return [{"tcp_host": "127.0.0.1", "tcp_port": 64738, "stable": 3}]
     return []
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/n8n/recipe_meta.py

@@ -5,3 +5,7 @@ HEALTH_PATH = "/healthz"
 HEALTH_OK = (200,)
 DEPLOY_TIMEOUT = 600
 HTTP_TIMEOUT = 300
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/plausible/recipe_meta.py

@@ -34,3 +34,7 @@ EXTRA_ENV = {
 # ABOVE the newest published tag — the documented case where the correct base is [-1], the
 # newest published version. Pin it.
 UPGRADE_BASE_VERSION = "3.0.1+v2.0.0"
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True

tests/uptime-kuma/recipe_meta.py

@@ -5,3 +5,7 @@ HEALTH_PATH = "/"
 HEALTH_OK = (200, 302)
 DEPLOY_TIMEOUT = 600
 HTTP_TIMEOUT = 300
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True