Builds and publishes a canonical snapshot to GitHub Releases.
This creates or repairs the immutable snapshot release for the current
snapshot_id. Local latest.json and snapshot-index.json outputs are still
written for inspection, but the canonical remote index is derived from the
published snapshot releases themselves.