[mike-holcomb]

Summary

• add a reviewer-gated, tag-driven GitHub release workflow for canonical SemVer tags
• build and verify self-contained x64 and ARM64 ZIPs from committed release evidence
• attest assembled assets and create a draft GitHub Release for human publication
• document ZIP installation, unsigned MSIX tradeoffs, and release dossier preparation
• pin the .NET SDK and GitHub Actions dependencies

Verification

• dotnet restore WinBulkTranscript.sln --locked-mode
• dotnet build WinBulkTranscript.sln --configuration Release --no-restore (0 warnings, 0 errors)
• dotnet test tests/WinBulkTranscript.Core.Tests/WinBulkTranscript.Core.Tests.csproj --configuration Release --no-build (98 passed)
• release hardening, workflow, and artifact-verifier checks under PowerShell 7 and Windows PowerShell 5.1
• workflow YAML parse and git diff --check

Repository setup after merge

Before creating the first release tag, configure required reviewers for the release environment, protect v* tags with a ruleset, and enable immutable releases. The release documentation added by this PR contains the corresponding operational guidance.

No tag or GitHub Release is created by this PR.