feat(release): native binary releases for five hosted targets

[solomonneas]

Summary

• Build graphtrail and graphtrail-mcp on five native GitHub-hosted runners.
• Bundle ten platform assets with checksums.txt, then use draft-first publication and post-upload verification.
• Lock the workflow and documentation contract in tests/repository_contract.rs.

Refs escoffier-labs/brigade#354

Test plan

• cargo fmt --check
• cargo clippy --all-targets --all-features -- -D warnings
• cargo test --all-features
• cargo build --release
• shellcheck scripts/release-smoke.sh
• PR workflow passes all five native build jobs and the bundle job
• After merge, backfill v0.4.0 and verify all 11 release assets

Local completion receipt: 20260719-054034-work-verify-c8cd57.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

• coderabbit-review

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: escoffier-labs/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 2373157c-f707-40ff-ac48-bd251acae1bb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/issue-354-native-releases

---

_{Comment @coderabbitai help to get the list of available commands.}