M10-05: Establish release artifact verification

[DrunkOnJava]

Created from the roadmap audit in TODO.md.

Source: https://github.com/DrunkOnJava/rvt-rs/blob/main/TODO.md#L1144
Tracking commit: 1ec8105

Scope

Labels: priority:P1, type:release, area:ci

• For each release, verify:
  • crate installs
  • Python wheel installs/imports on Linux/macOS/Windows
  • CLIs run on a sample
  • viewer build artifact loads
  • docs.rs builds
• Record output in release notes.

Acceptance criteria:

• Release checklist has exact commands.
• Failed verification blocks release publication or triggers hotfix.

Definition of done

• The TODO acceptance criteria for this section are implemented or explicitly superseded by a linked decision.
• Tests, fixtures, or documentation are added at the level appropriate to the change risk.
• User-facing behavior and limitations remain honest in README/docs/viewer messaging.
• Relevant CI checks pass before the issue is closed.

[DrunkOnJava]

Implemented in 4aa9ed5 and verified at current head 0ce54c1.

What changed:

• Added release source smoke verification to the publish workflow: install from source and run real sample CLI checks before publishing artifacts.
• Added docs.rs preview verification in release CI.
• Added WASM/viewer release smoke verification with a no-network browser load check.
• Split TestPyPI and real PyPI publishing so real PyPI waits for crates.io publication.
• Added docs/release-checklist.md and linked it from install docs.

Verification:

• Workflow YAML parses successfully.
• git diff --check
• anti-stub scan clean
• RUSTDOCFLAGS="--cfg docsrs -D warnings" cargo +nightly doc --no-deps --all-features -p rvt
• Offline source install with cargo install --path . --locked --offline --root /tmp/rvt-release-install-codex-20260425-1
• Installed CLI smoke: rvt-inspect --version, rvt-info, rvt-inspect --json, and rvt-ifc --diagnostics on real sample data with non-empty outputs.
• Viewer build plus Playwright no-network smoke passed.
• GitHub CI for current head 0ce54c1 completed successfully across all checks, including the docs.rs build preview.

Closing as completed.