feat(ci): expose manual publish targets

[JSONbored]

Summary

• Pins this repo to aio-fleet 85cd5de8869f371da44f1577117275511ead01c0.
• Exposes the shared manual publish target in the local caller workflow.

What changed

• Adds a constrained workflow_dispatch publish_target input generated by aio-fleet
• Updates reusable workflow pins across build, upstream check, release, and publish workflows
• Keeps repo-specific runtime/template inputs unchanged

Why

• Allows maintainers to rerun image publish jobs from main without no-op source edits
• Keeps caller workflows in parity with the central reusable workflow contract

Validation

• python -m aio_fleet sync-workflows --ref 85cd5de8869f371da44f1577117275511ead01c0 --dry-run
• python -m aio_fleet validate --all
• python -m aio_fleet debt-report --catalog-path /Users/shadowbook/.codex/worktrees/7c71/awesome-unraid --ref 85cd5de8869f371da44f1577117275511ead01c0
• git diff --check across all touched repos