feat(selfhost): add verified release updates with backups and recovery state

.gitea/workflows/build-push.yaml

@@ -17,7 +17,10 @@ jobs:
         with:
           node-version: '22'
       - run: npm ci --ignore-scripts --no-audit --no-fund
-      - name: Test release planning and recovery
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+      - name: Test releases and selfhost updates
         run: npm test
       - name: Check Conventional Commits
         run: npm run commits:check