Simplify release approval and collect CI reports

Replaces the final qualification-file requirement with the existing manual publish-package decision. The publisher automatically archives actual SDK and linked downstream test reports. No extra job, pipeline-ID input, exception form or token setup is needed.

Required CI jobs and protected tag/version/source/checksum checks remain enforced. Missing reports stay visible; the release owner reviews applicable E2E evidence in the release MR.

Verified locally: 377 offline SDK tests, 20 CI/release checks on Python 3.10–3.13, packaging, charts, types, lint and secret scan. Read-only collection also passed against the existing rc4 pipeline and its SRM consumer. Native CI for this change remains pending.