Define the release-candidate testing checklist #700

The release pipeline (#674) cuts a release candidate from a vX.Y.Z-rc.N tag, tests it, then promotes it without rebuilding. The "Testing a candidate" section of RELEASE.md is still a placeholder:

• TODO: list the checks every candidate must pass, with the devnets or hosts to run them on and the commands to upgrade each one.