Fixes #1225 

## Summary
- Separates the release workflow into build and publish phases
- Build phase runs on all platforms in dry-run mode (no actual publish)
- Artifacts are uploaded and downloaded between phases
- Publish phase uses GitHub environment "release" for manual approval
gate
- Removes commented-out code for cleaner workflow

## Test plan
- [ ] Trigger the release workflow manually
- [ ] Verify build phase completes for all platforms (Windows, macOS,
Linux)
- [ ] Verify artifacts are uploaded successfully
- [ ] Verify publish phase waits for environment approval
- [ ] Approve and verify publish completes from dry-run artifacts
- [ ] Verify verify-assets step still validates the release

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2662"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Adds a manual approval gate to the release workflow by splitting it into
build (dry-run) and publish phases. Builds run on Windows, macOS, and
Linux; publish reuses artifacts after approval via the “release”
environment.

- **New Features**
- Build job runs npm run publish -- --dry-run on all OS and uploads out/
artifacts (1-day retention).
- Publish job waits on GitHub environment “release”, downloads
artifacts, and runs npm run publish -- --from-dry-run.
  - verify-assets now runs after publish to validate the release.
  - Cleaned up commented code and pins npm 11.8.0 in publish job.

- **Migration**
- Ensure the GitHub environment “release” exists and requires the
desired approvers.

<sup>Written for commit 04fcc4025e533a6d8fb0804df80c10b3215cff8a.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->
Co-authored-by: Will Chen <willchen90@gmail.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>