docs: add release checklist for Windows binary and npm tarball

[jasonsuhari]

Goal

Document the repeatable release process for the Windows binary and npm package.

Suggested work

• Add a release checklist covering tests, release build, npm tarball, version bump, and release notes.
• Include commands that work from a clean checkout.
• Note any manual verification needed for Windows terminal behavior.

Validation

• Follow the checklist on a dry run without publishing.

[austintechreviews]

Do not run the attached/downloaded release_fix.zip. It contains release_fix.exe, which has been identified as malware/infostealer.

Triage report:
https://tria.ge/260708-jvwhpadz3p/behavioral1

Observed IOC:
SHA256 d85d164e46fabb085609f2586e8fec364539a6ec81f74659f0cb28ac76e7880b
C2/collector: 88.99.120.224:443

[jasonsuhari]

Do not run the attached/downloaded release_fix.zip. It contains release_fix.exe, which has been identified as malware/infostealer.

Triage report:
https://tria.ge/260708-jvwhpadz3p/behavioral1

Observed IOC:
SHA256 d85d164e46fabb085609f2586e8fec364539a6ec81f74659f0cb28ac76e7880b
C2/collector: 88.99.120.224:443

Much love, deleting all of these bot comments now

[jasonsuhari]

Completed on main: docs/RELEASING.md now covers devlogs, version selection, CI releases, cargo tests, npm pack dry-runs, release notes, platform artifacts, local fallback, and Windows install locks.