Add release pipeline and upgrade toolchain to TypeScript 7

Publishing infrastructure
- Three Gitea workflows: ci.yml (PRs, non-main pushes), publish-snapshot.yml
  (main -> Gitea under dist-tag @main) and release.yml (tags -> Gitea + npmjs)
- Tag-driven releases as <package-dir>-v<version>; the manifest stays the
  source of truth and release.yml refuses to run if tag and manifest disagree
- Every publish is idempotent: each step checks the registry first, so a run
  that fails on the second registry can simply be re-run
- Hard coverage gate (85% branches) shared by CI, the pre-push hook and local
  runs, since the thresholds live in vitest.config.ts rather than a CI flag
- README.PUBLISH.md documents the whole mechanism

Toolchain
- TypeScript 7 native compiler; drop tsgo and ts-node, use tsx for dev runs
- Biome 1.9 -> 2.x, Vitest 1 -> 4, zod 3 -> 4, inquirer 8 -> 14, pnpm 11.17.0
- Replace inquirer-checkbox-plus-prompt, which is peer-capped at inquirer <9,
  with enquirer's AutoComplete; the CubeSelection contract is unchanged
- Stand in for zod 4's removed z.AnyZodObject with a local AnyObjectSchema

Repo hygiene
- Stop tracking dist/; ignore coverage/, *.tsbuildinfo, .npmrc* and release.json
- Drop package-lock.json in favour of pnpm-lock.yaml

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

cubes/admin/cockpit/manifest.mjs

@@ -1,5 +1,4 @@
 import { cubes } from '@bitstack/nopy';
-import { z } from 'zod';
 
 export default cubes.Manifest({
   id: 'admin:cockpit',

cubes/admin/hostname/manifest.mjs

@@ -1,16 +1,20 @@
-import { z } from 'zod';
 import { cubes, uniqid } from '@bitstack/nopy';
+import { z } from 'zod';
 
 /**
  * Manifest for the admin:hostname cube.
  * This cube allows for setting and persistently changing the system's hostname.
  */
 export default cubes.Manifest({
-    id: 'admin:hostname',
-    name: 'Permanently change the hostname',
-    dependencies: () => [],
-    schema: z.object({
-        HOSTNAME: z.string().min(1).max(64).describe('The new hostname for the target host')
-        .default(`host-${uniqid()}`),
-    })
+  id: 'admin:hostname',
+  name: 'Permanently change the hostname',
+  dependencies: () => [],
+  schema: z.object({
+    HOSTNAME: z
+      .string()
+      .min(1)
+      .max(64)
+      .describe('The new hostname for the target host')
+      .default(`host-${uniqid()}`),
+  }),
 });

cubes/admin/locale/manifest.mjs

@@ -1,5 +1,5 @@
-import { z } from 'zod';
 import { cubes } from '@bitstack/nopy';
+import { z } from 'zod';
 
 export default cubes.Manifest({
   id: 'admin:locale',

cubes/apt/install/manifest.mjs

@@ -7,6 +7,9 @@ export default cubes.Manifest({
   dependencies: () => [],
   schema: z.object({
     UPDATE: z.boolean().describe('Update package cache before installing').default(false),
-    PACKAGES: z.string().describe('Space-separated list of packages to install').default('vim htop curl'),
+    PACKAGES: z
+      .string()
+      .describe('Space-separated list of packages to install')
+      .default('vim htop curl'),
   }),
 });

cubes/network/wifi/connection/manifest.mjs

@@ -1,5 +1,5 @@
-import { z } from 'zod';
 import { cubes } from '@bitstack/nopy';
+import { z } from 'zod';
 
 // [agnt://cogen/cogen/network-wifi-connection-1]{cartridge: "ansiblings/cubes", action: "generated", status: "generated"}
 
@@ -8,12 +8,18 @@ import { cubes } from '@bitstack/nopy';
  * Configures a WiFi client connection using NetworkManager (nmcli).
  */
 export default cubes.Manifest({
-    id: 'net:wifi:connection',
-    name: 'network:wifi:connection - Connect to a WiFi network',
-    schema: z.object({
-        SSID: z.string().min(1).describe('The SSID of the WiFi network to connect to'),
-        PASSWORD: z.string().min(8).describe('The password for the WiFi network'),
-        AUTOCONNECT: z.boolean().default(true).describe('Whether to automatically connect to this network'),
-        CONNECTION_NAME: z.string().optional().describe('Optional name for the connection (defaults to SSID)'),
-    })
+  id: 'net:wifi:connection',
+  name: 'network:wifi:connection - Connect to a WiFi network',
+  schema: z.object({
+    SSID: z.string().min(1).describe('The SSID of the WiFi network to connect to'),
+    PASSWORD: z.string().min(8).describe('The password for the WiFi network'),
+    AUTOCONNECT: z
+      .boolean()
+      .default(true)
+      .describe('Whether to automatically connect to this network'),
+    CONNECTION_NAME: z
+      .string()
+      .optional()
+      .describe('Optional name for the connection (defaults to SSID)'),
+  }),
 });

cubes/service/autostart/manifest.mjs

@@ -7,7 +7,11 @@ export default cubes.Manifest({
   dependencies: () => [],
   schema: z.object({
     APP: z.string().describe('The name of the systemd service (e.g., flintstone)'),
-    SERVICE_NAME: z.string().optional().describe('Display name for the service').default('Application'),
+    SERVICE_NAME: z
+      .string()
+      .optional()
+      .describe('Display name for the service')
+      .default('Application'),
     AUTOSTART: z.boolean().describe('Should the service be enabled and started?').default(true),
   }),
 });

cubes/user/edit/manifest.mjs

@@ -1,5 +1,5 @@
-import { z } from 'zod';
 import { cubes } from '@bitstack/nopy';
+import { z } from 'zod';
 
 // [agnt://cogen/cogen/user-edit-1]{cartridge: "ansiblings/cubes", action: "generated", status: "generated"}
 
@@ -8,13 +8,19 @@ import { cubes } from '@bitstack/nopy';
  * Allows modifying existing user accounts (password, groups).
  */
 export default cubes.Manifest({
-    id: 'user:edit',
-    name: 'user:edit - Modify an existing user account',
-    dependencies: () => [],
-    schema: z.object({
-        USER: z.string().describe('The username of the account to modify'),
-        PASSWORD: z.string().optional().describe('New password for the user (optional)'),
-        GROUPS: z.string().optional().describe('Comma-separated list of groups the user SHOULD be in (optional)'),
-        GROUPS_ABSENT: z.string().optional().describe('Comma-separated list of groups to REMOVE from the user (optional)'),
-    })
+  id: 'user:edit',
+  name: 'user:edit - Modify an existing user account',
+  dependencies: () => [],
+  schema: z.object({
+    USER: z.string().describe('The username of the account to modify'),
+    PASSWORD: z.string().optional().describe('New password for the user (optional)'),
+    GROUPS: z
+      .string()
+      .optional()
+      .describe('Comma-separated list of groups the user SHOULD be in (optional)'),
+    GROUPS_ABSENT: z
+      .string()
+      .optional()
+      .describe('Comma-separated list of groups to REMOVE from the user (optional)'),
+  }),
 });