[rasros]

Default checks now configure only JVM + Linux x64 in one Linux job. -Ptargets.full restores all 11 targets for release validation, with Linux, macOS/iOS and Windows checks in parallel. This copies the merged kpermute baseline from Eignex/kpermute#39.

• The ten .github files are byte-identical between the skema and kencode rollout branches. Publication verification reads the library name from settings; no repository-specific workflow fork is needed.
• Preserve the library's plugins, dependencies, metadata and documentation settings. Add Java 17/25 packaged-JAR tests, individual-report guards, publication/consumer checks, committed lockfiles and the shared encrypted caching setup.
• Keep full ABI references byte-for-byte equal to the existing main snapshots; the default Klib reference changes only its target header. Git attributes preserve the ABI generator's required EOF formatting.
• Stable/RC releases require explicit tags. RCs publish only to GitHub; normal automatic main snapshots remain enabled. This PR does not create tags or publish.

Validation

• Local default check lintDocs koverXmlReport publishAllPublicationsToLocalStagingRepository passed, including Java 17/25 packaged tests, default ABI and three-publication verification.
• Local full checkKotlinAbi githubReleaseAssets publishAllPublicationsToLocalStagingRepository -Ptargets.full passed; all 12 Maven publications and 12 GitHub publications passed metadata, artifact and checksum validation.
• Independent Java consumers passed Gradle-metadata, POM-only and flat GitHub-repository resolution. No KBuild plugin or build platform is used in the fixture.
• Report/release-version guard tests, actionlint and Git whitespace checks passed.
• Routine CI passed in 2m56s, with extra native jobs skipped.
• Full build-only CI passed on Linux (including JS/Wasm/WASI), Windows, macOS ARM64 and iOS simulator ARM64. All 12 staged publications passed verification.
• CI saved encrypted configuration-cache state. No tags were created and nothing was published.

Kencode-specific: preserve serialization/bignum dependencies, JVM example dependencies and package.md. The consumer round-trips Base64/Base64URL/Base85/Base62, checks JDK Base64 compatibility and exercises the published bignum runtime dependency.