Massu v1.15.4

Security

• Test fixtures are now synthetic. Five config-migration fixtures were snapshots of real
• CI conditions no longer name a private repository or a maintainer account. Job gates now
• Docs reference the maintainer by role, not by personal account.
• prepublish-check.sh now enumerates every GitHub URL in package.json and requires each to