Move release and verify workflows to a merge queue

We currently perform releases after merging to master. This is problematic because we can sometimes merge changes (especially to CI workflows) which break releases however we don't know that until after the change has already merged.

Instead, we should adopt a merge queue model. This would keep PRs as "light" as possible, and only execute the heavier prerelease logic when attempting to merge.