chore(ci): trigger release workflow by git tag push (#721)

## Summary
- Replace semantic-release (triggered on master push) with a
self-contained tag-triggered release workflow
- Supports pre-release dist-tags: `v5.0.0-beta.0` publishes with `--tag
beta`, `v5.0.0-alpha.1` with `--tag alpha`, etc.
- Adds version-tag mismatch guard to prevent accidental publishes
- Creates GitHub Releases automatically (with prerelease flag for
non-stable versions)

## Release process after merge
```bash
# Stable release
npm version patch  # or minor/major
git push origin master --tags

# Pre-release
npm version 5.0.0-beta.0
git push origin master --tags
```

## Note
Update the OIDC Trusted Publisher configuration on npmjs.com to point to
`release.yml` in this repo.

Closes #719

🤖 Generated with [Claude Code](https://claude.com/claude-code)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Chores**
* Release workflow now runs on pushed version tags, builds the project,
enforces exact version/tag matching, maps prerelease tags to npm
dist-tags, publishes to npm, creates GitHub Releases (marking
prereleases), and tightens workflow permissions.
* **Documentation**
* README updated with release instructions and examples for bumping
versions, tagging, and publishing stable and prerelease releases.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: fengmk2

.github/workflows/release.yml

@@ -2,18 +2,54 @@ name: Release
 
 on:
   push:
-    branches: [master]
+    tags:
+      - 'v*'
 
 permissions:
   contents: write
-  deployments: write
-  issues: write
-  pull-requests: write
   id-token: write
 
 jobs:
   release:
-    name: NPM
-    uses: node-modules/github-actions/.github/workflows/npm-release.yml@master
-    secrets:
-      GIT_TOKEN: ${{ secrets.GIT_TOKEN }}
+    name: Publish to NPM
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+
+      - name: Setup Vite+
+        uses: voidzero-dev/setup-vp@v1
+        with:
+          node-version: '22'
+          cache: true
+          run-install: true
+
+      - name: Verify version matches tag
+        run: |
+          TAG_VERSION="${GITHUB_REF_NAME#v}"
+          PKG_VERSION=$(node -p "require('./package.json').version")
+          if [ "$TAG_VERSION" != "$PKG_VERSION" ]; then
+            echo "::error::Tag version ($TAG_VERSION) does not match package.json version ($PKG_VERSION)"
+            exit 1
+          fi
+
+      - name: Determine npm dist-tag
+        id: dist-tag
+        run: |
+          TAG_VERSION="${GITHUB_REF_NAME#v}"
+          if echo "$TAG_VERSION" | grep -qE '-([a-zA-Z]+)'; then
+            # Extract pre-release identifier (e.g., "beta" from "5.0.0-beta.0")
+            PRE_TAG=$(echo "$TAG_VERSION" | sed -E 's/.*-([a-zA-Z]+).*/\1/')
+            echo "tag=$PRE_TAG" >> "$GITHUB_OUTPUT"
+          else
+            echo "tag=latest" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Publish to npm
+        run: npm publish --access public --tag ${{ steps.dist-tag.outputs.tag }}
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          prerelease: ${{ steps.dist-tag.outputs.tag != 'latest' }}

README.md

@@ -343,6 +343,22 @@ Node.js v22.3.0
 └─────────┴───────────────────────┴─────────┴────────────────────┴────────────┴─────────────────────────┘
 ```
 
+## Release
+
+Use `npm version` to bump the version, create a git tag, and push to trigger the release workflow.
+
+```bash
+# Stable release
+npm version patch  # or minor, major
+git push origin master --tags
+
+# Pre-release (beta, alpha, rc, etc.)
+npm version 5.0.0-beta.0
+git push origin master --tags
+```
+
+The [release workflow](.github/workflows/release.yml) will automatically publish to npm and create a GitHub Release when a `v*` tag is pushed. Pre-release tags (e.g., `v5.0.0-beta.0`) are published with the corresponding dist-tag (`beta`, `alpha`, `rc`, etc.).
+
 ## License
 
 [MIT](LICENSE)