Builds the AppImage, .deb and tar.gz on tag or by hand, runs the tests and a headless first-run check (per-user paths, the pinned s3d, the pty), and keeps the files with their checksums for 14 days.