ci: sync quantex alias package after release

[Drswith]

Summary

Configure the Release workflow to notify the Drswith/quantex alias package repository after quantex-cli is successfully published to npm.

The new step sends repository_dispatch with the released semver version without a leading v and maps stable releases to latest and prereleases to next.

Linked Artifacts

• Issue:
• ADR:
• OpenSpec: sync-alias-package-after-release
• Discussion:

Validation

• bun run memory:check
• bun run lint
• bun run format:check
• bun run typecheck
• bun run test (if behavior changed)
• Not run, explained below

bun run format:check was run and failed because this Windows checkout has many existing untouched files with CRLF line endings while .oxfmtrc.json requires LF. The touched workflow file passes targeted formatting with bunx oxfmt --check .github/workflows/release.yml.

Additional release workflow validation run locally:

• bun run openspec:validate
• bun run build
• bun run build:bin
• bun run release:artifacts

bun run package:check was also attempted and failed because this local environment does not have npm available (uv_spawn 'npm' ENOENT).

Release Intent

• Release: not applicable - docs/process/test-only change
• Release: patch - bug fix
• Release: minor - user-facing feature
• Release: major - breaking change

Docs Updated

• Not needed
• docs/...
• openspec/...
• Follow-up issue or OpenSpec change created instead

Scope Check

• I did not add a new ad hoc root-level Markdown file.
• I updated the relevant issue, ADR, spec, runbook, or captured the missing doc work as follow-up.
• I did not silently expand project scope without recording it explicitly.

Closure Check

• Working tree was clean after commit.
• Branch was pushed and this PR is the active delivery artifact.
• OpenSpec change is not needed, still active by design until merge, already archived, or queued for agent-driven archive closure.
• Release is not applicable, delegated to release automation, or verified.

Notes

The QUANTEX_SYNC_TOKEN repository secret must be configured with permission to dispatch events to Drswith/quantex.