A Windows checkout was silently rewriting genesis.json to CRLF, so the
working-copy hash stopped matching the published and fleet hash, and the
package gate went red on a file whose bytes in git were correct. bd4f8b4
fixed this once by re-adding the file; this pins the rule so no checkout
can undo it again.