Close patch 0.1.2 package tag creation

[docushell-dev]

Summary

• record completed patch 0.1.2 annotated package tag creation
• bind remote origin tag refs to the approved package source commit
• add a closeout guard and wire it into release-candidate prep
• retain hosted, production, Windows, bundled PDFium, benchmark, ethos-doc, and ethos-rag blockers

Tag refs

• ethos-package-ethos-doc-core-0.1.2 -> 3bc3564
• ethos-package-ethos-verify-0.1.2 -> 3bc3564
• ethos-package-ethos-pdf-0.1.2 -> 3bc3564

Verification

• PYTHONDONTWRITEBYTECODE=1 python3 .github/scripts/test_patch_0_1_2_package_tag_closeout.py
• PYTHONDONTWRITEBYTECODE=1 python3 .github/scripts/test_patch_0_1_2_package_tag_approval_decision.py
• PYTHONDONTWRITEBYTECODE=1 python3 .github/scripts/test_patch_0_1_2_package_tag_approval_request.py
• PYTHONDONTWRITEBYTECODE=1 python3 .github/scripts/test_release_candidate_prep.py
• PYTHONDONTWRITEBYTECODE=1 python3 .github/scripts/test_execution_status.py
• make light-check PYTHON=python3
• make milestone-e-prep PYTHON=python3
• make release-candidate-prep PYTHON=python3
• git diff --check