feat: publish native binaries and container images

[ShlomoCode]

Summary

• Add GitHub Actions workflow for automated releases
• Cross-platform binary builds (linux/darwin, amd64/arm64)
• Container images via ko to ghcr.io with Cosign signing

Based on #254

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}