Output Firebase publisher

When the optional why-hire-me-update skill is installed, use its four-hour cached, read-only version check once at the start of a task if network access is allowed. Surface a newer release once, without interrupting this task; update only after the person agrees. Skip the network check for an offline/private-only request. Never send career content.

Publish a reviewed static portfolio without making Firebase part of the career knowledge core. This leaf coordinates one Hosting destination; a connector owns Firebase CLI or API translation.

Accept only a completed static projection

Require an authorised portfolio manifest and a self-contained static directory. Verify release and projection IDs, authority, expiry, file paths, media types, sizes, SHA-256 digests, entry point, internal links, and policy. Reject symlinks that escape the root, secret files, source maps, local data, credentials, development files, remote scripts, analytics, or undeclared network dependencies.