fix(release): publish normalized latest.json under its real name

[mattenarle10]

Summary

• upload the normalized updater manifest as a file named latest.json; path#label only set a display label, so it landed as a second latest.normalized.json asset and latest.json kept its REST API URLs
• normalize after the release is published, since a draft's download URLs use a temporary untagged-… path that 404s once public

Verification

• ran the same normalize + upload by hand against v1.7.6; latest.json now has public releases/download/v1.7.6/ URLs and each one returns 200
• workflow YAML parses