Releasing previously required a local tag push, which the session
permission layer blocked twice this week, falling back to manual terminal
work. The workflow now supports dispatch with a version input:
verifies the version against package.json, runs the full check suite,
publishes to npm, and creates the tag AND the GitHub Release with notes
extracted from that version's CHANGELOG section (bilingual notes preserved —
this also automates what was a manual release-create step for 0.1.0).
Tag-push releases still work as a fallback and now get the same auto-created
Release. permissions.contents: write is required for the Release step.