Release infrastructure improvements

Hardened how we build, test, and ship updates, with stage separation between development and production, stricter version control, gated promotion, and automated drift checks on the release process. No user-facing changes.