The normal release command could tag after a required changelog command failed, leaving the Zig manifests outside the version transaction. Require project-owned installed release CLIs and a clean main matching origin/main, adopt published Bumpx 0.2.22, and update workspace and Zig versions in one rollback-capable transaction. Add an explicit-version release command and a supported changelog range for recovery after a rejected tag. The rejected v0.0.239 tag remains unchanged and was never published.
Validation: all required checks on 35c88d5 are green (normal CI 39129567144 and installed native packages 39129567141). Real public CLI regressions exercise successful versioning and complete rollback, missing tools, dirty/feature/stale release checkouts, and unchanged Git refs after failure. PKG (arm64/x64), DEB and MSI install/update/rollback checks pass. The runtime remains identical to the fully verified native-map candidate from PR #363.