fix: prevent release overflow

[apiipc]

Summary

• guard Sema#release() from adding more free tokens than the configured semaphore limit
• add regression coverage for calling release() without a matching acquire()
• add coverage that a valid release does not expand available concurrency beyond the limit

Closes #36

Verification

• yarn test
• yarn build