ci: prepare PyPI release workflow

[nichinichisou0609]

Summary

• pin the Python 0.0.1 native binding to the reviewed allium-deck 0.0.4 merge commit
• pin GitHub Actions and Rust 1.94.1 across the wheel matrix
• ensure only push tags can publish to PyPI or create a GitHub Release
• make PyPI retries tolerate already uploaded wheel files

Verification

• Rust release test: 1 passed
• Python release and LunaBot contract tests: 23 passed
• Ruff and actionlint
• built cp310-abi3 wheel and installed it into an isolated site-packages directory
• imported _allium_deck_native, allium_deck, and sekai_deck_recommend_cpp
• LunaBot contract tests against the installed wheel: 18 passed

No release tag or PyPI publication is performed by this PR.