docs: clarify review of Terraform release metadata (#403)

Author: mamayer19

RELEASE.md

@@ -185,15 +185,19 @@ The agent or maintainer carrying the SIE release owns this follow-up:
 5. Open focused PRs, follow CI and review findings on their final heads, and
    merge within the authorized scope through normal repository protections.
    Do not bypass a missing review or attempt to approve a PR as its author.
-6. After the updates merge, inspect the module's release-please PR. Confirm it
-   includes the new SIE references. Inspect its exact-head workflow runs and
-   reviews: `action_required` CI needs workflow-execution approval, and a skipped
-   bot review does not satisfy required reviews. Approve workflow execution where
-   authorized, or report that gate; require actual Terraform CI completion and
-   the required reviews before carrying the PR through the repository's release
-   process. Module release versions are independent of SIE's version. Verify the
-   resulting immutable tag and Terraform Registry version/download source; a
-   merged update PR alone does not publish a module version.
+6. After the updates merge, inspect the module's release-please PR and confirm it
+   includes the new SIE references. For generated manifest/changelog-only release
+   PRs, review that metadata directly; do not request or wait for a separate
+   CodeRabbit review when bot auto-review skips. Reinspect every changed head,
+   and take unexpected non-generated changes through the normal code-review flow.
+   Inspect exact-head workflow runs: `action_required` CI needs workflow-execution
+   approval. Approve execution where authorized, or report that gate. Require
+   actual Terraform CI completion and normal repository approvals, unless the
+   user explicitly authorizes bypassing those approvals. A skipped bot review
+   does not supply a required approval. Module release versions are independent
+   of SIE's version. Verify the resulting immutable tag and Terraform Registry
+   version/download source; a merged update PR alone does not publish a module
+   version.
 
 Report SIE artifact publication and Terraform follow-up separately. For each
 module, include the update PR/merge SHA and published module version, or the