Prepare a desktop release

Read release constraints, especially Tim's credential ownership and stable publication approval. Never operate on signing keys or change GitHub environment settings. Dispatch only the release operation requested.

Practice from the default branch (GitHub requires the workflow there):

gh workflow run release.yml --repo steerlabs/opensteer --ref main -f channel=insider -f publish=false
gh run list --repo steerlabs/opensteer --workflow release.yml --limit 5
gh run view RUN_ID --repo steerlabs/opensteer

For a run that built artifacts:

gh run download RUN_ID --repo steerlabs/opensteer --dir /absolute/release-evidence