fix: add notices file and risk report to release artifacts (#172)

fix: add notices file and risk report to release artifacts (#172) #118