release.yml: bare npm publish will steal @latest on frontier tags

[BaseInfinity]

Problem

release.yml:89 runs bare npm publish with no --tag flag. This defaults to @latest.

For v1.100.0 (Reliable) this is correct — Reliable IS @latest. But the first frontier tag will steal @latest from Reliable unless the workflow gets a dist-tag parameter.

Fix

Add a dist-tag input to the release workflow, defaulting to latest. Frontier releases pass --tag frontier.

Found by

Fable (advisor), v1.100.0 release audit.