Add governed ALZ release promotion

backend/README.md

@@ -1219,6 +1219,35 @@ transport region. Every annual source ZIP and crop code list remains under the
 storage volume. PostGIS computes exact hectares for drawn rectangles and
 persisted Areas; parcel identities are deliberately unavailable for lineage.
 
+Future definitive editions use the separate four-phase release coordinator:
+
+```bash
+docker exec geointel python /app/scripts/manage_alz_agriculture_release.py plan \
+  --project-id <KEMPEN_PROJECT_ID> --refresh-catalog
+
+docker exec geointel python /app/scripts/manage_alz_agriculture_release.py stage \
+  --project-id <KEMPEN_PROJECT_ID> \
+  --confirm-edition <YYYY-v3_FROM_PLAN>
+
+docker exec geointel python /app/scripts/manage_alz_agriculture_release.py review \
+  --project-id <KEMPEN_PROJECT_ID> \
+  --confirm-edition <YYYY-v3_FROM_PLAN> \
+  --confirm-plan-sha256 <SHA256_FROM_STAGE> \
+  --approve --reviewer "<OPERATOR_NAME>"
+
+docker exec geointel python /app/scripts/manage_alz_agriculture_release.py apply \
+  --project-id <KEMPEN_PROJECT_ID> \
+  --confirm-edition <YYYY-v3_FROM_PLAN> \
+  --confirm-plan-sha256 <SHA256_FROM_STAGE> \
+  --confirm-review-sha256 <SHA256_FROM_REVIEW>
+```
+
+The manager accepts only one catalog-confirmed definitive v3 release. `plan`
+writes nothing; `stage` downloads and normalizes without PostGIS mutation;
+`review` binds a named approval; `apply` revalidates catalog, hashes, schema,
+crop codes, scope accounting and previous-edition deltas before delegating to
+DatasetService. Provisional v1/v2 snapshots never enter the historical series.
+
 ## Buildings and Addresses Register snapshot
 
 After the Mol Area and regional GRB buildings have been provisioned, prepare