cut-release

Cut a tagged forgejo release (twiceshy artifacts + checksums + notes) via the release workflow, verifying the resolved version end-to-end so a misconfigured workflow can't publish a mis-tagged release. Use when asked to cut, tag, publish, or ship a release (e.g. "release v0.1.0", "tag and publish"), especially in a sandbox where direct git push of a tag is blocked.