chore(release): compose from the shared semantic-release config

[azlekov]

What changed

release.config.mjs now composes from @dodi-smart/semantic-release-config (v1.2.0) instead of hand-rolling every plugin. Composed, not extended, because this repo needs semantic-release-scope-filter, a cargo set-version exec step, and github options the shared github() helper does not take.

• semantic-release-scope-filter stays first, unchanged, as this repo's own devDependency (the shared package does not carry it).
• commitAnalyzer() and releaseNotes() run with no overrides: the repo's rules and types are literally the same set as the shared ones (just reordered), modulo the conventional-changelog-conventionalcommits v10 hidden -> effect rename.
• changelog stays gated to non-develop branches, unchanged.
• exec still runs cargo set-version --workspace ${nextRelease.version}.
• git and github go through the package's plugin() escape hatch rather than their helpers: git's message keeps the repo's v prefix (this repo tags v${version}, the shared helper's default message does not have the prefix), and github keeps successComment: false, releasedLabels: false, assets: [].
• branches and tagFormat are unchanged.

Behaviour is unchanged. Verified by:

• Diffing the resolved config (branches, tagFormat, plugin order, and every plugin's options) against the old .releaserc.js, evaluated the same way, on both develop and main: identical except for the two mechanical differences above.
• A real dry run on develop after linking the shared config with actions/semantic-release-config/install.sh: every shared plugin loaded from the linked prefix, semantic-release-scope-filter loaded from this repo's own node_modules, all verifyConditions passed, and the run correctly concluded "no relevant changes, so no new version is released" (0 commits since the last tag).

Workflow

.github/workflows/release.yml gains one step, linking the shared config into node_modules, right after bun install and before semantic-release:

- uses: dodi-smart/.github/actions/semantic-release-config@v1

Everything else in the workflow, including the separate backmerge job, is unchanged. --extends now points at release.config.mjs (the old .releaserc.js is removed; a .mjs file is always ESM regardless of the type field in package.json, and this package.json has none).

package.json

Removed the devDependencies the shared package now carries: @semantic-release/commit-analyzer, @semantic-release/release-notes-generator, @semantic-release/changelog, @semantic-release/exec, @semantic-release/git, @semantic-release/github, conventional-changelog-conventionalcommits. Kept semantic-release and semantic-release-scope-filter.

This makes Renovate PR #5 (bumping conventional-changelog-conventionalcommits to v10) obsolete, since that dependency no longer lives in this repo's own package.json.

Obsoletes

The dependency these Renovate PRs bump is gone from this repo, so they are superseded by this change.
Closes #5

🤖 Generated with Claude Code

[github-actions]

Knowledge layer

Check	Result
Decision checks	passed
Guard trailers	passed

Spec currency is reported in the job summary and never fails a build, the same severity the local pre-commit hook uses.