docs: record v0.8.7 winget submission and correct the v0.8.6 record

v0.8.6's winget PR was closed unmerged after Microsoft's validation
pipeline failed (Internal-Error-PR), so 0.8.6 never reached winget. The
previous note claimed validation passed, which conflated local manifest
validation with the upstream pipeline result.

Also records the fork-drift failure mode: submit-winget.ps1 reports it
as an OAuth problem, but the fix is a fork sync, not a token refresh.

Author: xarthurx

docs/PROGRESS.md

@@ -64,7 +64,8 @@
 - **ShortDescription accuracy** — v0.8.3 ([PR #406474](https://github.com/microsoft/winget-pkgs/pull/406474)) patched the inherited `Fast local & cloud speech-to-text dictation for Windows` to `Fast cloud speech-to-text dictation for Windows` because the app went cloud-only in v0.8.1. Inherited metadata must be re-checked against reality each release, not just against the format rules — patch on the PR branch via the GitHub contents API (no clone of winget-pkgs needed).
 - **v0.8.4** ([PR #406528](https://github.com/microsoft/winget-pkgs/pull/406528)) — first release to inherit the corrected v0.8.3 metadata; all four rules verified clean on the PR diff, no patch needed.
 - **v0.8.5** ([PR #409130](https://github.com/microsoft/winget-pkgs/pull/409130)) — inherited metadata verified clean: SPDX `MIT` and `LicenseUrl`, concise cloud-only `ShortDescription`, publisher/support/package URLs, correct x64 NSIS URL and SHA-256, and `ReleaseDate` in the installer manifest.
-- **v0.8.6** ([PR #410464](https://github.com/microsoft/winget-pkgs/pull/410464)) — preview and submission validation passed. The actual PR diff was re-checked and clean: SPDX `MIT` plus `LicenseUrl`, concise cloud-only `ShortDescription`, publisher/support/package URLs, correct v0.8.6 x64 NSIS URL and SHA-256, `ReleaseNotesUrl`, and top-level installer `ReleaseDate`.
+- **v0.8.6** ([PR #410464](https://github.com/microsoft/winget-pkgs/pull/410464)) — **never merged.** The manifest was clean (SPDX `MIT` plus `LicenseUrl`, concise cloud-only `ShortDescription`, publisher/support/package URLs, correct v0.8.6 x64 NSIS URL and SHA-256, `ReleaseNotesUrl`, and top-level installer `ReleaseDate`), but Microsoft's validation pipeline failed on 2026-07-31 and the PR was closed on 2026-08-06 labelled `Internal-Error-PR` — a failure on their side, not a manifest defect. WinGet therefore went from 0.8.5 straight to 0.8.7. **Local `-Preview` success and "Manifest metadata validation passed" only prove the manifest is well-formed; they say nothing about the upstream pipeline. Always re-check the PR state days later — a submitted PR is not a shipped package.**
+- **v0.8.7** ([PR #423824](https://github.com/microsoft/winget-pkgs/pull/423824)) — the first submission attempt failed locally with "The forked repository could not be synced with the upstream commits", because `xarthurx/winget-pkgs` had drifted 10,279 commits behind `microsoft/winget-pkgs`. `submit-winget.ps1` misreports this as an OAuth problem; **do not run `wingetcreate token -s` for it.** Fix with `gh repo sync xarthurx/winget-pkgs --source microsoft/winget-pkgs` (a pure fast-forward when the fork is `ahead=0`) and resubmit. The PR diff was then verified clean against all four metadata rules, with the installer SHA-256 independently recomputed from the published asset.
 
 ## NSIS Updater Behavior on Windows