ci: restore Vite+ release workflow

[altaywtf]

Summary

Changed

• Restores VitePlus setup and vp commands in release workflow
• Pins verify-path checkout/setup actions and keeps release writes on putio-release-bot
• Reduces default release-job GITHUB_TOKEN permissions to read-only
• Moves release/publishing detail into docs/DISTRIBUTION.md and leaves CONTRIBUTING.md as navigation

Risks

• Release job depends on the pinned setup-vp action SHA continuing to resolve to the expected v1 implementation

Verification

• actionlint .github/workflows/*.yml
• git diff --check

Complexity

• Reduced: workflow follows the repo VitePlus contract again

[Copilot]

Pull request overview

Restores the repo’s Vite+ (vp) contract in CI/release automation while tightening release credentials handling and moving detailed publishing guidance into dedicated distribution documentation.

Changes:

• Reworked the release job to use voidzero-dev/setup-vp + vp install (matching CI/local workflows) and to publish via the putio-release-bot GitHub App token.
• Pinned key GitHub Actions to SHAs and reduced the release job’s default GITHUB_TOKEN permissions.
• Added docs/DISTRIBUTION.md and updated contributing/agent docs to point to it.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
docs/DISTRIBUTION.md	New distribution/publishing documentation (release environment, credentials, local checks).
CONTRIBUTING.md	Replaces detailed release instructions with a link to the new distribution doc.
AGENTS.md	Adds distribution doc to the navigation index.
.github/workflows/ci.yml	Restores Vite+ setup/commands in release workflow, pins actions, and routes GitHub writes through the release bot token.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.