ci: restore PR #2805 release attribution

[f-trycua]

Summary

• map rsyuzyov@gmail.com to the verified GitHub identity rsyuzyov
• cover the exact PR fix(cua-driver): stop Windows update --apply from killing itself #2805 squash commit and coauthor trailer in the release collector tests
• retain the existing fail-closed behavior for other unresolved human coauthor emails

Why

The Cua Driver 0.18.0 release PR #2836 cannot collect attribution for squash commit aebd9962d2686e75ff9e17e0a3735e303ff96981. PR #2805 and its source commits establish that Roman Syuzyov's contributor email belongs to GitHub user rsyuzyov, but that trusted mapping was absent from the release attribution configuration.

This restores the contributor credit from #2805 without weakening the collector's other attribution checks. It changes release infrastructure and tests only; it does not change product behavior or request another product release.

Salvaged from #2805.

Validation

• python3.13 -m pytest .github/scripts/tests/test_release_attribution.py .github/scripts/tests/test_pr_attribution.py -v — 31 passed
• python3.13 .github/scripts/release_backfill.py validate — 146 candidates and 36 explicit skips validated
• git diff --check

The broader script suite reached 147 passed with one unrelated existing failure: the Cua Sandbox bump configuration says 0.1.25 while its package metadata says 0.1.26.