Add Cloudflare public update publishing

[vortexopenclaw]

Summary

• add an R2-backed Cloudflare Worker for public Dashcam Offloader update manifests and downloads
• publish GitHub release ZIPs to R2 and update latest.json when dedicated Cloudflare secrets are configured
• document dedicated token permissions, resources, and public update endpoints

Validation

• node --check workers/updates/worker.js
• ruby YAML parse for .github/workflows/release.yml
• git diff --check

Deployment note

Dedicated token env/secrets are not installed locally yet. The workflow skips Cloudflare publishing until CLOUDFLARE_DASHCAM_OFFLOADER_API_TOKEN and CLOUDFLARE_DASHCAM_OFFLOADER_ACCOUNT_ID are configured.

[vortexopenclaw]

Cloudflare setup update: dedicated token is now working. Created remote R2 bucket dashcam-offloader-updates, deployed Worker at https://dashcam-offloader-updates.vortexradar.workers.dev, uploaded the current test-share ZIP and dashcam-offloader/latest.json, verified manifest + download SHA-256, and installed repo secrets CLOUDFLARE_DASHCAM_OFFLOADER_TOKEN / CLOUDFLARE_DASHCAM_OFFLOADER_ACCOUNT_ID plus variable DASHCAM_OFFLOADER_UPDATE_BASE_URL.