fix(ci): invalidate relocated test fingerprints

tools/ci-matrix/src/ci_gate.rs

@@ -1047,12 +1047,22 @@ fn validate_workflows(root: &Path, manifest: &CoverageManifest) -> Result<()> {
         "flock --exclusive 9",
         "rm -f -- \"$cargo_target/.metacrate-ready\"",
         "rm -f -- \"$CARGO_TARGET_DIR/.metacrate-ready\"",
+        "touch \"$cargo_target/.metacrate-cloned\"",
         "stale_target",
         "python3 tools/normalize_git_mtimes.py --state",
         ".metacrate-mtimes.json\" --check",
         "'**/Cargo.toml'",
         "METACRATE_DEPENDENCY_CACHE_HIT",
         "cp -al \"$previous_target\" \"$cargo_target\"",
+        "METACRATE_CARGO_TARGET_CLONED=$cloned_target",
+        "if test \"$METACRATE_CARGO_TARGET_CLONED\" = true",
+        "fingerprint_root=\"$CARGO_TARGET_DIR/debug/.fingerprint\"",
+        "-path '*/libremetaverse-programs-*/*'",
+        "-name 'test-integration-test-*'",
+        "-printf '%h\\0' > \"$fingerprint_list\"",
+        "rm -rf -- \"$integration_fingerprint\"",
+        "done < \"$fingerprint_list\"",
+        "rm -f -- \"$fingerprint_list\" \"$CARGO_TARGET_DIR/.metacrate-cloned\"",
     ] {
         if !required.contains(marker) {
             return Err(MatrixError::new(format!(
@@ -1065,6 +1075,11 @@ fn validate_workflows(root: &Path, manifest: &CoverageManifest) -> Result<()> {
             "cold dependency/native validation must retain the keyed compiled target",
         ));
     }
+    if required.contains("cargo clean") {
+        return Err(MatrixError::new(
+            "cloned targets must retain reusable program and dependency artifacts",
+        ));
+    }
     if required.contains("rm -rf -- \"$CARGO_HOME/registry\"") {
         return Err(MatrixError::new(
             "cold validation must preserve immutable extracted sources for Cargo fingerprints",