feat: harden fork package publishing

[silviot]

Summary

• add codemyriad registry-aware fork publishing scripts for dev snapshots and stable myriad releases
• publish dev snapshots with SHA-bearing prerelease versions and refuse version reuse in the registry
• add package-level registry guardrails for vlcn-js packages and a GitHub workflow to build and publish dev snapshots

Validation

• ==> Track: dev
  ==> Version suffix: dev.20260313.ffe54661
  ==> Source SHA: ffe5466
  ==> Registry: https://npm.codemyriad.io/
  ==> Dist tag: dev
  ==> Dry run: true

==> Stamping versions...
@vlcn.io/xplat-api@0.15.0-dev.20260313.ffe54661
@vlcn.io/ws-common@0.2.0-dev.20260313.ffe54661
@vlcn.io/wa-sqlite@0.22.0-dev.20260313.ffe54661
@vlcn.io/crsqlite@0.16.3-dev.20260313.ffe54661
@vlcn.io/logger-provider@0.2.0-dev.20260313.ffe54661
@vlcn.io/rx-tbl@0.15.0-dev.20260313.ffe54661
@vlcn.io/ws-client@0.2.0-dev.20260313.ffe54661
@vlcn.io/crsqlite-wasm@0.16.0-dev.20260313.ffe54661
@vlcn.io/ws-server@0.2.2-dev.20260313.ffe54661
@vlcn.io/ws-browserdb@0.2.0-dev.20260313.ffe54661

==> Checking registry for existing versions...
@vlcn.io/xplat-api@0.15.0-dev.20260313.ffe54661 - available
@vlcn.io/ws-common@0.2.0-dev.20260313.ffe54661 - available
@vlcn.io/wa-sqlite@0.22.0-dev.20260313.ffe54661 - available
@vlcn.io/crsqlite@0.16.3-dev.20260313.ffe54661 - available
@vlcn.io/logger-provider@0.2.0-dev.20260313.ffe54661 - available
@vlcn.io/rx-tbl@0.15.0-dev.20260313.ffe54661 - available
@vlcn.io/ws-client@0.2.0-dev.20260313.ffe54661 - available
@vlcn.io/crsqlite-wasm@0.16.0-dev.20260313.ffe54661 - available
@vlcn.io/ws-server@0.2.2-dev.20260313.ffe54661 - available
@vlcn.io/ws-browserdb@0.2.0-dev.20260313.ffe54661 - available

==> DRY RUN: skipping publish
Would publish @vlcn.io/xplat-api@0.15.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/xplat-api
Would publish @vlcn.io/ws-common@0.2.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/ws-common
Would publish @vlcn.io/wa-sqlite@0.22.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/deps/wa-sqlite
Would publish @vlcn.io/crsqlite@0.16.3-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/deps/cr-sqlite/core
Would publish @vlcn.io/logger-provider@0.2.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/logger-provider
Would publish @vlcn.io/rx-tbl@0.15.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/rx-tbl
Would publish @vlcn.io/ws-client@0.2.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/ws-client
Would publish @vlcn.io/crsqlite-wasm@0.16.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/crsqlite-wasm
Would publish @vlcn.io/ws-server@0.2.2-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/ws-server
Would publish @vlcn.io/ws-browserdb@0.2.0-dev.20260313.ffe54661 from /home/silvio/dev/vlcn-js-publish-hardening/packages/ws-browserdb

==> Restoring package.json files...

[silviot]

Superseded by local publish automation in the Librocco repo. We want codemyriad-specific registry/versioning scripts to live outside the fork so the fork diff stays minimal and upstream-mergeable changes can be proposed separately.