ci: add unified release workflow for all crates

[sopak]

Summary

Replaces the three individual publish-* workflows with a single release.yml that publishes all crates in the correct dependency order.

How it works

1. Triggered by a single tag (v*)
2. xtax-encryption — published first (if not already on crates.io)
3. xtax-blob-storage — published next (if not already on crates.io), polls crates.io API until visible
4. xtax (facade) — published last (if not already on crates.io)
5. GitHub Release — created automatically via gh release create

Why

• xtax depends on xtax-blob-storage, which depends on xtax-encryption
• Individual workflows can't express cross-crate dependencies
• One tag → one workflow run → correct sequence, every time

Usage

git tag v0.1.1
git push origin v0.1.1

[codacy-production]

Not up to standards ⛔

🔴 Issues 1 high

Alerts:
⚠ 1 issue (≤ 0 issues of at least minor severity)

Results:
1 new issue

Category	Results
Security	1 high

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}