release: prepare winTerm v1.0.0 stable candidate

[HelloThisWorld]

Summary

Prepare the repository-side winTerm 1.0.0 Stable candidate without creating a tag or public Release.

• Unify application, MSIX, PowerShell module, Shell protocol, Workspace metadata, and About UI versions at 1.0.0.
• Add traceable build metadata and separate winTerm telemetry provider identities while leaving usage telemetry, fallback crash reporting, and update requests disabled for winTerm builds.
• Replace the beta release automation with an exact-tag, protected two-stage Draft/Publish workflow that requires production signing, timestamp verification, allowlisted assets, checksums, SBOMs, attestations, re-download verification, and clean-machine evidence before publication.
• Isolate WinGet generation to Kaname.winTerm and remove the upstream Microsoft project-board automation.
• Add Stable feature/default matrices, compatibility and schema policies, release/security/accessibility/performance reviews, release notes, community templates, and an auditable blocker checklist.
• Record the repository create pr protocol in AGENTS.md.

Related issues

No linked issue. This is the feature-frozen v1.0.0 release-preparation change.

Detailed changes

The previous tree identified itself as a 0.6 beta candidate and had an unsigned beta Draft workflow. It did not provide a protected Stable publication boundary, production publisher injection, signature/timestamp validation, complete asset allowlisting, checksums, SBOM generation, provenance verification, or a truthful final release gate.

The new workflow may prepare an explicitly blocked unsigned Draft when protected signing values are absent. It cannot publish that Draft. Publishing requires the exact tagged commit, a protected non-development publisher, valid trusted and timestamped signatures, complete checksum and package verification, GitHub Attestation verification, and exact clean-machine validation evidence. ARM64 remains excluded unless the same commit has native ARM64 build/install/launch evidence.

This PR intentionally does not create v1.0.0, a Draft Release, a public Release, WinGet submission, or Stable update manifest. Those actions remain blocked by production signing and runtime acceptance gates.

Validation performed

Passed locally:

• powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\scripts\winterm\test.ps1 -Suite Smoke -Configuration Release -Platform x64
• Shell integration and compatibility scripts for Windows PowerShell 5.1 and Command Prompt
• Workspace model, restore, recovery, import-security, and layout fixture scripts
• Docking transformations, transactions, session transfer, history, presentation, UI source validation, and model benchmark scripts
• Workspace benchmark scripts
• checksum positive and tamper-negative fixtures
• release-artifact, WinGet-manifest, Stable-update-manifest, and build-metadata generator fixtures
• git diff --check

Not available locally:

• C++/C++/WinRT/XAML compilation and compiled unit tests
• Release MSIX build, unpack, install, launch, upgrade, uninstall, and coexistence tests
• production signing and RFC 3161 timestamp verification
• PowerShell 7 and native ARM64 validation
• Narrator, High Contrast, scaling, pseudo-localization, packaged performance, and soak testing

The Draft PR is expected to run both winTerm validation and the full Windows Debug/Release build/package workflow.

Checklist

• The change is focused and does not include unrelated formatting.
• Tests were added or updated where appropriate.
• All tests claimed above actually ran and passed.
• User-facing behavior and limitations are documented in this repository.
• Version or schema changes include compatibility and migration notes.
• Package identity, winterm.exe, and Microsoft Terminal coexistence remain isolated.
• No command text, terminal output, clipboard content, credentials, or private paths are logged.
• New source and script files contain the appropriate MIT license header.
• Generated build output, secrets, certificates, and local absolute paths are excluded.