The CWS rename to chrome-use updates the EXISTING item (knfcmbam…) with a key-stripped package, not a new key-locked item — existing users auto-update and reviews are kept. Native host allow_origins already lists both ids so the relay doesn't break. Also point the icon/screenshots section at the generated assets.