fix(store): Validate release names

[jan-auer]

Validates the release name according to this logic:

BAD_RELEASE_CHARS = "\n\f\t/"

def is_valid_version(value):
    return not (
        any(c in value for c in BAD_RELEASE_CHARS)
        or value in (".", "..")
        or not value
        or value.lower() == "latest"
    )

Notes:

• The release field is annotated as nonempty = "true", which corresponds to not value.
• The bad characters are validated with the regex: ^[^\r\n\f/]*\z