[api][backend] support and test manual package releases with special release tags

- we need also a test case for product ftp trees...
[api] permissions to execute a release depend on the release target, but not on the source