docs(release): authorize scoped store uploads

.codex/skills/generate-release/SKILL.md

@@ -13,9 +13,13 @@ drafting notes and [references/artifact-verification.md](references/artifact-ver
 before accepting a build.
 
 A request to generate or create a release authorizes the scoped version edits,
-release notes, local builds, release commits, and one local annotated tag. It
-does not authorize pushing commits or tags, uploading binaries, submitting a
-store release, changing signing credentials, or regenerating native projects.
+release notes, local builds, release commits, and one local annotated tag. When
+the request also specifies a mobile release, upload, or store-submission
+workflow, it authorizes the requested store upload within its stated platform
+and destination scope after the exact artifact has been verified. It does not
+authorize pushing commits or tags, changing signing credentials, regenerating
+native projects, a public rollout, App Review submission, or additional
+TestFlight distribution unless the request explicitly includes that action.
 
 ## Defaults