Complete release-process follow-ups

[CarlKCarlK]

Summary

• verify the wheel rebuilt from the generated sdist instead of comparing two checkout-built wheels
• normalize project URL labels and use HTTPS documentation metadata
• require direct-dependency lower-bound audits when adding Python feature releases
• record the need for a scheduled fresh dependency-resolution check

Validation

• workflow YAML parses successfully
• uv lock --check passes
• direct and sdist-derived Python 3.14 wheels build and compare byte-for-byte equal
• git diff --check passes