docs: reconcile first release bootstrap state

[dDevAhmed]

Summary

Updates the release documentation to match the repository's current state after the 0.1.0 version commit was merged.

Changes

• records that main is already versioned at 0.1.0 but remains unpublished;
• pins the approved pre-release bootstrap commit 8684d940afc8e2d9e56658061de779429757b780;
• documents the one-time 0.0.0 non-default bootstrap-tag publication;
• documents npm Trusted Publisher settings;
• documents the protected GitHub npm-release environment and NPM_PUBLISH_ENABLED variable;
• includes Dependency Graph enablement in the release-admin checklist;
• documents how the protected publish workflow should be activated for the already-versioned 0.1.0 state.

Tracking: #88