The release workflow should run linting, a full build, and the quickstart installation test before publishing a release/tag, so broken releases are caught before they ship.

Migrated from scratch/todo.md + scratch/todo.ideas.md.