docs: AGENTS.md — the release steps pinned (annotated tags, the v0.3.0 flow)

AGENTS.md

@@ -279,6 +279,16 @@ cargo clippy --target wasm32-unknown-unknown -- -D warnings
 cargo publish --dry-run --allow-dirty         # before a release
 ```
 
+### Release steps (after the version bump + verification)
+
+1. Commit the release (bump + CHANGELOG/README/AGENTS pins).
+2. Tag it: `git tag -a vX.Y.Z -m "release: vX.Y.Z — <the tag>"`
+   — **annotated**, always (v0.1.0/v0.2.0 are lightweight; annotated
+   since the v0.3.0 release, 2026-10-19).
+3. `git push origin main && git push origin vX.Y.Z`.
+4. `cargo publish` (no `--allow-dirty` once the tree is clean).
+5. Confirm with `cargo search` / `cargo info`.
+
 The corpus replay is the fuzz gate (the alkcall §7.9 posture): it
 replays every committed seed through the same invariant functions the
 fuzz targets run, on stable, without nightly. Campaigns (nightly,