[lloydsmart]

Summary

• replace permissive inline release packaging with a strict, reproducible packaging script
• package the correct licence, validate exact archive manifests, and publish SHA-256 checksums
• run the complete test suite and ShellCheck before release publication
• fix the Makefile git-cliff configuration path
• add standard --help, --version, and -- option handling
• make --no-file-tee suppress console-backend file mirroring and avoid dry-run temporary workspaces
• document preservation warnings, logging behavior, dry-run side effects, CLI options, and release verification
• add CLI, artifact-content, checksum, and repeated-build reproducibility tests

Why

The release workflow previously suppressed packaging errors, referenced the wrong licence filename, did not validate generated archives, and published no checksums. CLI and documentation behavior also diverged around option parsing, file logging, and dry-run side effects.

This change makes incomplete releases fail before publication and aligns documented behavior with the implementation.

Validation

• make test (12 test scripts)
• ShellCheck across production, packaging, tests, and stubs
• actionlint across modified workflows
• markdownlint on README.md
• repeated packaging produces identical hashes
• git diff --check

Closes #34