chore(infra): tracking-file guard, LWDiD data canary, /push-pr-update range scan + changelog compiler hardening

chore(infra): tracking-file guard, LWDiD data canary, /push-pr-update range scan + changelog compiler hardening #477