2.2.1

Status: tagged release.

Fixes

• Verify the actual CodeQL matrix jobs and CodeQL Policy before publishing an annotated release tag.
• Prevent release verification from timing out while waiting for the obsolete single CodeQL job.
• Keep failed, missing and pending gates blocking publication, including release tag creation.

No public API changes.