merge ci/wire-engram-elql-dispatch into dev

Replace placeholder comment with actual curl dispatch call that fires
engram-updated to neuron-technologies/elql on every Engram release.

.gitea/workflows/ci-stage.yaml

@@ -16,6 +16,16 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Enforce source branch (stage ← dev only)
+        if: github.event_name == 'pull_request'
+        run: |
+          SOURCE="${GITHUB_HEAD_REF}"
+          if [ "${SOURCE}" != "dev" ]; then
+            echo "ERROR: Stage branch only accepts PRs from 'dev'. Source was: '${SOURCE}'"
+            exit 1
+          fi
+          echo "Source branch check passed: ${SOURCE} → stage"
+
       - name: Install build dependencies
         run: |
           apt-get update -qq

.gitea/workflows/engram-release.yaml

@@ -16,6 +16,16 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Enforce source branch (main ← stage only)
+        if: github.event_name == 'pull_request'
+        run: |
+          SOURCE="${GITHUB_HEAD_REF}"
+          if [ "${SOURCE}" != "stage" ]; then
+            echo "ERROR: Main branch only accepts PRs from 'stage'. Source was: '${SOURCE}'"
+            exit 1
+          fi
+          echo "Source branch check passed: ${SOURCE} → main"
+
       - name: Install build dependencies
         run: |
           apt-get update -qq
@@ -135,17 +145,15 @@ jobs:
           echo "Published engram version=${VERSION} to foundation-prod/engram/engram"
           rm -f /tmp/gcp-key.json
 
-      # Dispatch engram-updated to any downstream dependents
-      - name: Dispatch engram-updated to dependents
+      # Dispatch engram-updated to downstream dependents
+      - name: Dispatch engram-updated to elql
         env:
           GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
           GITEA_API: https://git.neuralplatform.ai/api/v1
         run: |
-          # Add downstream repos here as the dependency graph grows
-          echo "engram-updated dispatch ready (no downstream targets configured yet)"
-          # Example:
-          # curl -sf -X POST \
-          #   -H "Authorization: token ${GITEA_TOKEN}" \
-          #   -H "Content-Type: application/json" \
-          #   "${GITEA_API}/repos/neuron-technologies/some-service/dispatches" \
-          #   -d '{"type":"engram-updated","inputs":{"engram_version":"latest","commit":"'"${GITHUB_SHA}"'"}}'
+          curl -sf -X POST \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            "${GITEA_API}/repos/neuron-technologies/elql/dispatches" \
+            -d "{\"type\":\"engram-updated\",\"inputs\":{\"engram_version\":\"latest\",\"commit\":\"${GITHUB_SHA}\"}}"
+          echo "Dispatched engram-updated to neuron-technologies/elql"