docs: record fragment arming guard

CHANGELOG.md

@@ -6,6 +6,7 @@ so entries say what changed, cite the issue, and stop.
 
 ## Unreleased
 
+- `changelog-armed` — treat `changelog.d/` as the arming, validate every development fragment, and require bare releases to consume the directory into their exact publishable section (#115).
 - `lib/changelog.sh` + `bin/changelog-assemble` — read the `changelog.d/` fragments, assemble one release section (canonical group order, one shape per repo), and consume exactly what was published (#114).
 - BUILDER.md — the handed-off PR is the parked claim's fourth shape, its handoff is its declaration, and shape 2 covers the round awaiting its first verdicts (#109).
 - `labels-reconcile` — a degraded mergeability/checks read now logs gh's actual stderr (collapsed, bounded) beside the byte-identical counted line, and the blind-sweep warning leads with the observed reason instead of asserting the permissions cause (#101).

actions/changelog-armed/changelog-armed.sh

@@ -102,7 +102,10 @@ if [ -d "$fragments_dir" ]; then
   fi
 
   if [ -n "$fragments" ]; then
-    surviving="$(printf '%s' "$fragments" | paste -sd ', ' -)"
+    surviving="$(printf '%s\n' "$fragments" | awk '
+      BEGIN { separator = "" }
+      { printf "%s%s", separator, $0; separator = ", " }
+    ')"
     echo "changelog-armed: these fragments were not consumed: $surviving — re-run 'changelog-assemble $ver'" >&2
     exit 1
   fi