[codex] Add Windows v1.0 release packaging

[logabell]

Summary

Adds the first Windows release packaging path for GameVault v1.0.

Changes

• Adds CI and tag-based release workflows for GitHub Actions.
• Adds an NSIS Windows installer build through electron-builder.
• Bumps workspace, desktop, extension, and manifest versions to 1.0.0.
• Adds a release-version consistency check that accepts the v1.0 tag for package version 1.0.0.
• Keeps packaged native-host and bundled 7-Zip files outside app.asar so runtime paths continue to work.

Validation

• npm run check:release-version -- v1.0
• npm run typecheck
• npm run lint
• npm test
• npm run build
• npm run package:windows
• Started the packaged win-unpacked app with --background and stopped it after a successful launch.