fix(ci): remove nonexistent release checks

Author: iamjr15

.github/workflows/static-checks.yml

@@ -65,11 +65,6 @@ jobs:
       - run: pnpm architecture:check
       - run: pnpm deadcode
       - run: pnpm typecheck
-      - name: Verify aggregate production resource source contract
-        run: pnpm verify:production-resources -- --source-only
-      # Prove that a production-target prebuilt accepts live-shaped, inert
-      # configuration before Vercel has assigned its runtime URL.
-      - run: pnpm check:web-prebuilt-env
       - run: pnpm build
         env:
           # Static compilation must never expose a real Clerk Backend API credential

README.md

@@ -196,10 +196,6 @@ test-shaped Clerk publishable value rather than a deployable credential. Protect
 authenticated `vercel curl` requests using the scoped CI token, so no separate
 protection-bypass secret is distributed. `VERCEL_PRODUCTION_URL` is required and
 must exactly equal the canonical `https://trycheatcode.com` frontend origin.
-`pnpm check:web-prebuilt-env` is the non-secret local/CI proof that a production
-prebuilt selects live credentials and canonical origins through
-`VERCEL_TARGET_ENV=production` while correctly leaving the runtime-only
-`VERCEL_ENV` and `VERCEL_URL` unset until Vercel deploys the artifact.
 Use one least-privilege Cloudflare release token scoped to the production account
 and the exact `trycheatcode.com` zone. It needs account `Workers Scripts Write`
 (the Workflows list/detail/version/instance APIs accept this permission), exact-zone

apps/web/README.md

@@ -21,7 +21,6 @@ Framework app only.
 
 ```bash
 pnpm --filter @cheatcode/web typecheck
-pnpm check:web-prebuilt-env
 ```
 
 Product QA is direct `agent-browser --auto-connect --session cheatcode-debug`

packages/env/README.md

@@ -16,7 +16,6 @@ read raw `process.env` values only to pass them into the pure `./web-config` val
 
 ```bash
 pnpm --filter @cheatcode/env typecheck
-pnpm check:web-prebuilt-env
 ```
 
 ## Env