Fix release checklist path risk classification

[kforris]

Summary

• treat hyphenated, underscored, and path-separated release checklist/readiness names as nominal context
• preserve high-risk routing for explicit release, deploy, and publish actions
• add a regression test for the exact deployed docs/release-checklist.md object hint

Validation

• npm run check
• npm run format:check
• npm audit --audit-level=high
• git diff --check