feat(docs): add changelog release workflow (#1164)

* feat(docs): add changelog release workflow

* fix(scripts): resolve CodeQL findings in release scripts

- draft-changelog.ts: replace existsSync+writeFileSync check-then-act with
  an atomic exclusive-write flag (flag: wx) to fix the js/file-system-race
  TOCTOU finding; overwrite only under --force (flag: w).
- set-version.ts: switch execSync shell-string git calls to execFileSync with
  argument arrays so the interpolated version/paths can never be interpreted
  by a shell, resolving the js/indirect-command-line-injection findings.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(scripts): lower writeReleaseNotes complexity below CRAP threshold

The exclusive-write fix pushed writeReleaseNotes to cyclomatic 5 / CRAP 30.0
(fallow/high-crap-score, threshold 30.0). The '!force' guard in the catch is
redundant — EEXIST is only reachable under the 'wx' flag (force=false), since
'w' overwrites without throwing. Dropping it returns the function to cyclomatic
4 / CRAP 20 with identical behavior.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix(docs): address changelog review feedback

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

releases/README.md

@@ -0,0 +1,11 @@
+# Release notes
+
+Reviewed GitHub Release bodies live here.
+
+Create the next draft with:
+
+```bash
+bun run changelog:draft <version> --write
+```
+
+The publish workflow uses `releases/v<version>.md` as the GitHub Release body when the file exists. Keep these notes user-facing; implementation details can stay in pull requests.

releases/v0.6.52.md

@@ -0,0 +1,16 @@
+# HyperFrames v0.6.52
+
+Released on 2026-05-27.
+
+This release focuses on stability improvements across Studio rendering, producer telemetry, and core timeline handling.
+
+## Fixed
+
+- **Studio:** Added an FFmpeg pre-flight check before rendering so setup issues fail earlier with a clearer path to resolution.
+- **Producer:** Normalized structured error messages so telemetry and logs no longer collapse details into `[object Object]`.
+- **Core:** Guarded timeline method calls for non-conformant timeline-like objects.
+- **Release:** Removed a stale marketplace version field from packaged release metadata.
+
+## Full changelog
+
+https://github.com/heygen-com/hyperframes/compare/v0.6.51...v0.6.52