fix(release): bound native compilation stages

[dollspace-gay]

Summary

• Split the native x86-64 Windows daemon library compilation from its existing deterministic final link, and insert an Intel Mac CLI-library stage using its own dependency features.
• Retain exact candidate, role, environment, workflow-attempt and ordered parent-library provenance; validate shipped tar/ZIP bytes and reject prebuilt products and unsafe Windows transport names.
• Add manual-only comparisons with the previous compilation paths. Diagnostic binaries cannot enter release assembly.
• Keep all release profiles, supported platforms, signing controls, independent rebuild gates and ten-minute job ceilings unchanged. Move CLI help text into its own module to preserve the existing source budget.

Verification

• 332 xtask unit tests and 7 integration tests passed.
• 52 native packaging tests and 44 distribution-tooling tests passed.
• Strict clippy, format check, actionlint and xtask all passed.
• Exact-head hosted native validation and previous-path byte comparison are pending and required before retagging.

Crosslink #57. The release remains a draft; the owner approved this staging repair and replacement of the still-draft tag after validation.