feat(releases): add semantic release orchestration

[szmyty]

Closes #47.

What this adds

• a read-only verify-release-plan action for Aether egohygiene.repository-release/v1 declarations
• exact selected-component version-authority, changelog, Git/default-branch, immutable-tag, and Relay profile checks
• deterministic success and bounded failure evidence
• a read-only release-prepare.yml workflow for pull-request or manual review
• a write-separated semantic-release.yml handoff that re-verifies before invoking the existing immutable release-artifact.yml
• always-retained publication outcome evidence and identical-only retry semantics
• repository-class guidance for Rust, Python, npm, containers, sites, publications, contracts, workspaces, and internal repositories
• Relay dogfooding through an Aether declaration, Keep a Changelog file, standard Taskfile handoffs, and a manual-only release workflow

Registry publication, container pushes, site deployment, DOI/archive submission, and product credentials remain repository-owned adapters. Ordinary pull requests cannot reach publication because the immutable release workflow rejects every event except an explicit default-branch push or manual dispatch.

Relay release preparation

This PR prepares Relay v1.5.0 in release.json and CHANGELOG.md, but does not publish it. After merge, the repository's explicit manual release.yml dispatch will build the github-action profile bundle and dogfood the new reusable handoff.

Validation

• complete suite: 180 tests passed
• catalog validation: 7 actions, 10 workflows, 6 reusable workflows
• Aether's own release-declaration validator
• deterministic github-action profile bundle validation
• Python compilation
• 37 JSON documents parsed
• 18 YAML documents parsed with PyYAML
• inline Bash syntax and whitespace checks

Ruby/actionlint are unavailable locally, so required GitHub CI remains responsible for the native Actions/YAML workflow graph validation. Relay #6 remains open for the broader organization-wide durable-report rollout; this PR implements the release-specific evidence boundary required by #47.

[devactivity-app]

Pull Request Summary by devActivity

Metrics

Achievements

• @szmyty
  Earned XP: 10⭐
  Check Your Progress