Update release-all.md with lessons from v0.1.26/v0.1.27 releases

[ajfloeder]

Updates the release documentation based on operational experience from the v0.1.26 (full) and v0.1.27 (patch) releases.

Changes

New operational notes

• nnf_sos requires -M flag (multiple API versions of dws)
• nnf_mfu "No new changes to release" is normal - skip it
• nnf_doc must wait ~60s after nnf_deploy tag for GitHub Release to publish; uses main branch (not master)
• merge-pr may produce no visible output - added gh api verification command
• tag-release "Bypassed rule violations" explained (tag protection rulesets, admin bypass)
• Vendoring checks should run on ALL repos to catch stale submodule pointers

Updated verification section

• compare-releases.sh now supports -i (image changes) and -d (full diff) flags
• Updated examples to reflect actual v0.1.26 to v0.1.27 output

GH_TOKEN

• Clarified as classic token (not fine-grained), 40 chars, starts with ghp_

[roehrich-hpe]

Now you need a .github/instructions/ or .github/prompts/ file for nnf-deploy that wraps this up conveniently, telling copilot how to find and use this doc.

[ajfloeder]

Now you need a .github/instructions/ or .github/prompts/ file for nnf-deploy that wraps this up conveniently, telling copilot how to find and use this doc.

Yep. Working on that. :)