Make Windows package-smoke and verify-tarball jobs optional in both CI
and Release workflows so they do not block GHCR/npm/deploy.

Constraint: Windows runners timeout or fail intermittently for this project
Rejected: Keep as hard gate | blocks every release 20% of the time
Confidence: high
Scope-risk: narrow
Tested: check:platform-package-version