refactor(release)!: simplify releases and make contrib runtime-owned

[f0rr0]

Summary

• Remove repository-shape policy tests, synthetic release state, semantic fingerprints, local-registry machinery, and completed recovery code.
• Retire contrib as an independently versioned release product.
• Make native own 12 contrib carriers and WASIX own 5, derived from one canonical carrier descriptor.
• Keep native and WASIX independently releasable; shared contrib, PostgreSQL, or runtime-contract inputs select both owners.
• Keep directed dependent-consumer bumps, exact publication locks, immutable-byte reconciliation, upstream pacing, and bootstrap recovery.

Breaking change

The public contrib Cargo facade is native-only. Runtime-owned contrib carriers now take the version and release identity of their native or WASIX owner. Historical 0.1.0 and 0.1.1 packages and tags remain immutable; the first migrated runtime release should use 0.2.0.

Impact

• Native-only releases do not publish WASIX contrib carriers.
• WASIX-only releases do not publish native, npm, or Maven contrib carriers.
• Shared contrib inputs fan out explicitly to both runtime owners.
• The PR removes 85,920 net lines across 486 files.
• The release workflow shrinks from 3,591 to 1,980 lines.

Validation

• Full release check: 1,019 passed, 2 platform skips, 0 failed.
• Final model audit: 154 passed, 0 failed.
• Release metadata: 17 products, 186 stable carriers.
• Actionlint, extension-model validation, formatting hooks, and git diff checks pass.