ci: restore Vite+ release workflow

[altaywtf]

Summary

Changed

• Restores VitePlus setup and vp commands in release workflow
• Pins verify-path checkout/setup actions and keeps release writes on putio-release-bot
• Reduces default release-job GITHUB_TOKEN permissions to read-only
• Moves release/publishing detail into docs/DISTRIBUTION.md and leaves CONTRIBUTING.md as navigation

Risks

• Release job depends on the pinned setup-vp action SHA continuing to resolve to the expected v1 implementation

Verification

• actionlint .github/workflows/*.yml
• git diff --check

Complexity

• Reduced: workflow follows the repo VitePlus contract again

[Copilot]

Pull request overview

Restores and hardens the repo’s release/publishing pipeline by reintroducing Vite+ (vp) setup/commands in CI, tightening default GITHUB_TOKEN permissions, and moving release operational details into dedicated documentation.

Changes:

• Re-pins actions/checkout and voidzero-dev/setup-vp to SHAs and uses vp install in CI/release jobs.
• Reduces default release-job GITHUB_TOKEN permissions to contents: read, relying on a GitHub App token (putio-release-bot) for write operations.
• Adds docs/DISTRIBUTION.md and updates contributor/agent docs to link to it.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File	Description
docs/DISTRIBUTION.md	Adds centralized distribution/release documentation (environment, credentials, local checks).
CONTRIBUTING.md	Replaces inlined release publishing details with a link to the distribution doc.
AGENTS.md	Adds Distribution to the project navigation links.
.github/workflows/ci.yml	Restores Vite+ setup/commands in the release workflow, pins actions by SHA, and tightens default token permissions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.