DRIVERS-2896 requires client libraries to report authorized publication of release artifacts to their distribution channels. This extension publishes to Maven Central with no such record.

Adds a trace-artifacts function to .evergreen/config.yml, attached to publish-snapshot (product mongo-hibernate-snapshot) and publish-release (product mongo-hibernate). It runs after the publish command in the same task, over the local Maven repositories the publish writes. The traced set is what Maven Central receives: jar, pom, signature and the md5 and sha1 sidecars, 24 files per module. .evergreen/ssdlc-expansions.sh supplies product_name, and product_version from git describe with the r tag prefix stripped.