release: prepare v1.0.4

[jbjardine]

What changed

• add the v1.0.4 changelog and include it in the release archive
• pin the upstream gpf-geocodeur source to commit da0f365d4a0bcac5371b4962769abc17bfcd8cef
• make the runtime checkout accept the immutable commit
• remove the stale first-release text from generated GitHub releases
• add regression coverage for release reproducibility and packaging

Why

The proxy dependency updates merged after v1.0.3 require a new published image. The tag workflow also rebuilds the runtime image, which previously followed a mutable upstream branch and could therefore change without a GeoDock source change.

Validation

• public release regression contracts
• QA memory and reboot contracts
• Bash syntax and ShellCheck
• Python compilation
• Docker Compose validation
• complete local runtime image build
• pinned upstream commit verified inside the built image
• v1.0.4 tarball generated and verified to contain CHANGELOG.md

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2b6604c5f6

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".