Align the release dispatcher with organisation secrets

[SkyBlade1978]

Summary

• remove the additional release environment gate from the manual dispatcher
• continue using the existing organisation Maven and CurseForge secrets
• retain exact live publication confirmation, immutable artifact checks, branch routing, and sequential Maven, CurseForge, then GitHub publication
• force the CodeQL compile task to execute so Gradle build cache hits cannot leave the analysis database empty

Verification

• gradlew test --no-daemon --stacktrace
• workflows parsed successfully as YAML
• dispatcher contract checks cover all four organisation secret references and the absence of the extra environment gate
• CodeQL compilation has a contract check for --rerun-tasks

This PR does not publish or tag a release.