update dependencies and gate extension releases

[hfellerhoff]

• Update Axios, devalue, adm-zip, fast-uri, and brace-expansion to patched versions while preserving dependency security policies.
• Require one approval for both extension store releases on main, while keeping app and website deployments automatic.
• Remove the standalone extension deployment guide and link the extension README to the release workflow.