Run release audits in the release workspace

[Polarnova]

Summary

• run the release proof audit in the same injected consumer workspace that built CryptBoolean
• restore and save the production build cache around release builds
• preserve the existing repository-root audit behavior for ordinary CI

Verification

• actionlint
• shellcheck and shell syntax checks
• forbidden-token scan
• Blueprint statement-style validation (116 nodes; 115 formalized; 1 open)

The previous v0.3.0 release run completed the Linux consumer build but failed only when the audit was launched from the repository workspace.