Release

Checklist

Update version in package.json
bun install to refresh the lockfile
bun run all (type check + test + build)
Commit src/, dist/, and package.json together (the check-dist workflow enforces that dist/ matches src/) and push to main
Wait for CI to go green on main before tagging
Create a GitHub Release with tag vX.Y.Z. Once published, this tag is immutable. Never force-push it.
Update the floating major tag. Force-pushing this one is intentional:
```
git tag -fa v1 -m "Update v1 to vX.Y.Z"
git push origin v1 --force
```
v1 is the only tag that ever gets force-pushed. Running git push origin vX.Y.Z --force would silently rewrite a published release.