[Copilot]

Add deterministic registration of Envoy-org releases, initially examples, using upstream .bcr/ files. Missing dependencies, dropped patches/overlays, or ambiguous inputs abort without writing entries or opening a PR.

• Generator: Stdlib-only Python renders sources, hashes the shared archive once, rewrites module/sibling versions, strips overrides, and updates metadata. Dry-run performs validation without registry writes.
• Workflow: Accept manual or register-module dispatches, validate inputs before authentication, and open registration PRs through pinned toolshed actions as publish-envoy[bot].
• Contract and coverage: Document upstream requirements and .envoy versus manual .envoy.N versions; add mocked-network tests to registry CI.

Example dispatch payload:

{"repository":"envoyproxy/examples","ref":"v0.2.10","version":"0.2.10","dry-run":false}

The examples dry-run matches source integrity; upstream presubmits and unrelated MODULE whitespace are preserved rather than reproducing manual-entry differences. No modules/ changes are included. Producer-side dispatch hooks remain follow-up work.