Add release pipeline and upgrade toolchain to TypeScript 7

Publishing infrastructure
- Three Gitea workflows: ci.yml (PRs, non-main pushes), publish-snapshot.yml
  (main -> Gitea under dist-tag @main) and release.yml (tags -> Gitea + npmjs)
- Tag-driven releases as <package-dir>-v<version>; the manifest stays the
  source of truth and release.yml refuses to run if tag and manifest disagree
- Every publish is idempotent: each step checks the registry first, so a run
  that fails on the second registry can simply be re-run
- Hard coverage gate (85% branches) shared by CI, the pre-push hook and local
  runs, since the thresholds live in vitest.config.ts rather than a CI flag
- README.PUBLISH.md documents the whole mechanism

Toolchain
- TypeScript 7 native compiler; drop tsgo and ts-node, use tsx for dev runs
- Biome 1.9 -> 2.x, Vitest 1 -> 4, zod 3 -> 4, inquirer 8 -> 14, pnpm 11.17.0
- Replace inquirer-checkbox-plus-prompt, which is peer-capped at inquirer <9,
  with enquirer's AutoComplete; the CubeSelection contract is unchanged
- Stand in for zod 4's removed z.AnyZodObject with a local AnyObjectSchema

Repo hygiene
- Stop tracking dist/; ignore coverage/, *.tsbuildinfo, .npmrc* and release.json
- Drop package-lock.json in favour of pnpm-lock.yaml

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

packages/nopy/src/cubes/dependencies.ts

@@ -8,8 +8,8 @@ import type { Variables } from '../nopy.common.js';
 import type { NopyConfig } from '../nopy.config.js';
 import type { DeployCall } from '../nopy.executor.js';
 import { VariableAssignment } from '../nopy.prompts.js';
-import { type CubeSession, type NopySession } from '../nopy.session.js';
-import type { Cube, CubeVariables, DependencySpec, HookContext } from './types.js';
+import type { CubeSession, NopySession } from '../nopy.session.js';
+import type { Cube, CubeVariables, HookContext } from './types.js';
 
 const log = getLogger(['nopy', 'resolution']);
 
@@ -40,7 +40,11 @@ export class BuildContext {
   /**
    * Resolves a cube, its dependencies, and hooks recursively
    */
-  public async resolveCube(cubeId: string, host: string, overrides: CubeVariables = {}): Promise<void> {
+  public async resolveCube(
+    cubeId: string,
+    host: string,
+    overrides: CubeVariables = {}
+  ): Promise<void> {
     const cube = this.allCubes[cubeId];
     if (!cube) {
       throw new Error(`Cube not found: ${cubeId}`);
@@ -56,7 +60,7 @@ export class BuildContext {
 
     // 2. Variable collection
     if (this.options.isSessionReplay) {
-      const sessionCube = this.session.cubes.find(c => c.key === cubeId);
+      const sessionCube = this.session.cubes.find((c) => c.key === cubeId);
       if (sessionCube) {
         this.variables.assign(cubeId, 'defaults', sessionCube.variables);
       }
@@ -101,7 +105,7 @@ export class BuildContext {
   private buildDeployCall(cube: Cube, host: string): void {
     const cubeId = cube.id;
     const callKey = `${cubeId}:${host}`;
-    
+
     if (this.resolvedCubes.has(callKey)) return;
 
     const parts: string[] = [];
@@ -128,7 +132,7 @@ export class BuildContext {
       dependencies: [],
     });
 
-    if (!this.cubeSessions.some(s => s.key === cubeId)) {
+    if (!this.cubeSessions.some((s) => s.key === cubeId)) {
       this.cubeSessions.push({
         key: cubeId,
         variables: this.variables.get(cubeId, 'prompts'),