docs(releasing): list the six files a version bump touches

[raeq]

Adds a "Where the version lives — bump all six" subsection to RELEASING.md.

During the 0.11.1 release, Copilot's review caught that the version bump had missed CITATION.cff and uv.lock — both live away from the four manifests and are easy to miss. They were fixed before publish, so the shipped metadata is consistent, but the gap is worth documenting so the next release doesn't hit it.

The new subsection lists:

• the six files that carry the version (the 4 manifests + CITATION.cff + uv.lock, with uv lock regenerating only the editable entry);
• the two things that look like versions but must not change — #[deprecated(since = "X")] and .. deprecated:: X markers;
• the glue-crate version = "0.0.0" + minor-only disarm_core pin (untouched by a patch);
• a pre-tag grep sweep for stray references.

Docs-only; no code change.

Assisted-by: Claude Code:claude-opus-4-8

[Copilot]

Pull request overview

Adds release-process documentation to reduce the chance of shipping inconsistent version metadata by explicitly listing every file that must be updated during a version bump.

Changes:

• Documents the six files that must be updated for a version bump (including CITATION.cff and uv.lock).
• Adds guidance on avoiding accidental edits to deprecation markers and glue-crate versioning.
• Adds a pre-tag “grep sweep” step to catch stray references to the old version.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[raeq]

Both fixed: put the #[deprecated(since = "X")] span on a single line so it renders, and updated the sweep command to actually implement the exclusions it describes — grep -rn "<old-version>" --exclude=CHANGELOG.md . | grep -v deprecated.