Bootstrap Warium NeoForge port scaffold

docs/release-notes.md

@@ -0,0 +1,33 @@
+# Warium NeoForge 1.21.1 1.2.7+neo.21.1.225
+
+## Downloads
+
+| Variant | Download |
+| --- | --- |
+| Latest private artifact | `https://git.wilkensxl.de/api/packages/MrSphay/generic/warium-neoforge-1.21.1/latest/warium-neoforge-1.21.1-latest.jar` |
+
+## Highlights
+
+- Private NeoForge `21.1.225` scaffold for Minecraft `1.21.1`.
+- Reproducible Warium `1.2.7` source artifact verification against SHA1 `528d81630a23fb4004e3abdd99b16bd225cd1e92`.
+- Generated registry stubs for original blockstates and standalone item models.
+- CI decompile artifact for behavior-port follow-up work.
+
+## Security
+
+- Dependency audit: handled by Gitea dependency-check workflow.
+- Secret handling: package publishing uses `REGISTRY_TOKEN`; no token is tracked.
+- External network calls: Modrinth, NeoForge Maven, Maven Central.
+
+## Verification
+
+| Check | Result |
+| --- | --- |
+| `python tools/generate_port_sources.py` | Passed locally |
+| `python tools/registry_parity.py` | Passed locally |
+| `./gradlew --no-daemon build` | Pending Gitea runner |
+| Artifact download | Pending Gitea runner and `REGISTRY_TOKEN` secret |
+
+## Notes
+
+This is not a public release. Keep the repository and packages private until rights are clarified.