feat(education): publish Guanghu subdomain stage one

product-source/guanghu-education-industry-os/protocol/update-authority.json

@@ -0,0 +1,18 @@
+{
+  "schema": "guanghu.update-authority/v1",
+  "policyId": "GH-EDU-UPDATE-AUTHORITY-001",
+  "controller": "ICE-GL-infinity",
+  "publisher": "Guanghu",
+  "controlMode": "GUANGHU_IS_PRIMARY_UPSTREAM",
+  "allowedUpdateChannels": ["guanghu-human-approved-signed-release"],
+  "openSourceRelation": "PARTS_SOURCE_ONLY_NOT_UPSTREAM",
+  "upstreamSync": "DISABLED",
+  "automaticUpstreamFetch": false,
+  "automaticUpstreamMerge": false,
+  "automaticComponentUpdate": false,
+  "serverSourceCheckout": false,
+  "serverSourcePresence": "FORBIDDEN",
+  "admissionRule": "An external part may enter only after Guanghu review, module numbering, protocol adaptation, rebuild and signature.",
+  "forbiddenRemotes": ["tolaria-upstream", "forgejo-upstream", "grok-upstream"],
+  "receiptRequired": true
+}