release-management

Ship releases safely — semver, changelogs, signed tags, rollout and rollback plans, sealed release provenance.