fix(ci): make release tests portable

[voioo]

Summary

• move the crypto test heap and worker settings from POSIX-only shell syntax into Vitest config
• add a manual release-asset recovery trigger that never republishes npm
• validate the requested recovery tag against the CLI package version
• attach recovered binaries and manifests to the explicitly requested release

Verification

• crypto: 117 tests passed
• shared: 30 tests passed
• CLI: 36 tests passed
• workspace typecheck passed
• CLI build passed
• git diff --check passed

This enables rebuilding the missing binary assets for the existing v0.1.5 release after both Windows runners failed on the previous POSIX-only test command.