Drop the release branch workflow. Publish from master via version tags
(or workflow_dispatch on a tag) using pub.dev OIDC — no OAuth secrets.

Co-authored-by: Cursor <cursoragent@cursor.com>