fix(ci): add manual trigger to winget-submit as fallback for tag-ref reruns

workflow_run only fires for Release runs that completed on the default
branch. Re-running Release via workflow_dispatch against a tag ref (as
happened for v1.35.1, v1.35.2, and v1.37.0) builds and signs fine but
silently never chains into winget-submit -- no error, no skipped run.
Add workflow_dispatch as a manual fallback and document the gotcha.