Builds a deterministic receipt for one independently published companion package.

The builder accepts only exact, source-bound candidate, CI, rehearsal, and package-row facts. It does not authorize a merge or publication.