Release gates

The current dispatch target is website/direct only.

Linux artifacts can be produced and published from this Ubuntu workspace. Windows and macOS artifacts must be built on their target operating systems so native packaging, signing, and platform-specific checks run correctly.

Store variants remain outside the active dispatch matrix.