RelayGuard: restore authorization guard (!5)

Restores the upstream_guard check between planner and release in workflows/release_pipeline/pipeline.py, using the trusted fixture. Requires human approval; not merged automatically.