[codex] restore automatic releases

[wakemeup0]

Summary

• Keep CI and Release split, but restore automatic Hooversion releases after successful main CI.
• Remove release PR and RELEASE_TOKEN flow from generated workflows.
• Update Hooversion workflow generation, tests, docs, and bundled CLI output.
• Publish npm packages through npm trusted publishing, with Bun still used for install/check/build and registry lookup.

Validation

• actionlint .github/workflows/ci.yml .github/workflows/release.yml
• generated workflow actionlint from hooversion init
• bun run check