One-shot image publishers should bind authorization to a commit, not a hard-coded PR
Observation (2026-09-08 UTC, source: theft COR-4082 implementation and GitHub PRs #807/#809): the PDF417 image publication workflow required its authorized PR number to be hard-coded in the workflow itself. After the application fix was merged, publishing the resulting image ther…