Allow permissionless release after deadline

[1sgtpepper]

Summary

• remove the unconditional creator authorization gate from release_funds
• document the release authorization matrix and fixed success_destination invariant
• add tests covering post-deadline release without creator release auth and fixed-destination transfer behavior

Closes #235

Validation

• git diff --check
• cargo fmt -- --check
• conflict-marker scan