ci: automate VMI version bumps

[Zhendong404]

Summary

• move the VMI release version into CMakeLists.txt alongside the PTOAS project version
• read and validate VMI release tags from the CMake version source
• bump the VMI patch version on the default branch after a successful VMI release
• keep the macOS workflow read-only to avoid concurrent version bump pushes

Testing

• python3 test/python/test_release_version_scripts.py
• python3 .github/scripts/compute_vmi_version.py --check-tag vmi-v0.1.3
• git diff --check official/main...HEAD