Promote dev: harden branch and release verification

[oshtz]

Summary

• run one required CI gate on both dev and main
• require main pull requests to promote dev
• add native Windows/macOS smoke checks for published releases
• update event-listener to 5.4.2 and document Apple-silicon release support

Verification

• dev CI gate passed: https://github.com/oshtz/openexpress/actions/runs/30710435717
• 21 frontend test files / 42 tests
• 33 route smoke tests
• 74 Rust tests, clippy, Rust 1.88 check, and cargo audit