Standard gated npm publish flow + @persona-engine/core 0.2.1 (#42)

[shojikumaru]

Closes #42.

Adds the org-standard release path (proven today on meetmate/context-kit/sitter): workflow_dispatch + npm-publish environment gate + --provenance, token-less from the first dispatch (the package already exists, so npm trusted publisher/OIDC is wired before dispatch — no NODE_AUTH_TOKEN secret exists in this repo).

Monorepo notes: the npm package root is packages/core (workspace), so npm's root-README force-inclusion traps do not apply; files allowlist already present. Workflow runs npm ci → typecheck → vitest (375 tests, green locally) → workspace build → version check → publish from packages/core.

Version: 0.2.1 (npm is at 0.1.0 while the repo shipped v0.2.0 on 2026-08-21; 0.2.1 because this bump commit postdates tag v0.2.0). After merge: tag v0.2.1 + Release (T-5), then dispatch + Sho approval + npm view / CONTENT_IDENTICAL verification.

Review: 5-seat release-gate (writer=Alpha config-only diff; seats kimi/glm/grok/gemini/codex-sol per loom-seats) runs on this PR before merge.

🤖 Generated with Claude Code

[shojikumaru]

5-seat release-gate review record (writer=Alpha, config-only diff)

Panel per loom-seats (--size S --risk release-gate --absent fable-5 --absent opus-5, writer-same-family opus excluded): kimi-k3 / glm-5.3 / grok-4.6 / gemini-3.7-flash / codex-sol.

r1 at c7f54f0: GO×2 (kimi: 5 attack lines clean by execution; gemini: static clean) / NO-GO×3 — glm, grok, codex independently converged on the same blocker: npm pkg get version returns a workspace-keyed object inside packages/core, so the version-check step could never pass (fail-closed DOA). Orchestrator reproduced: npm pkg get version in packages/core → {"@persona-engine/core": "0.2.1"} (npm 11.17.0/node 26). grok additionally flagged the not-yet-created npm-publish environment (correct; it is the planned pre-dispatch owner step).

Fix f98e3d5: read the manifest directly (node -p "require('./package.json').version") — glm's own verified suggestion.

Delta (glm, blocker owner): GO at f98e3d5 — fixed step exits 0 on 0.2.1 / exits 1 on 0.2.0 (run-block extracted byte-identical from the workflow); delta touches only that step + comment; old command still reproduces the blocker in a control.

Full seat outputs archived in session scratchpad (seats/pe43/*/out.md). Note for the record: the orchestrator pushed the fix commit while grok/codex were still reading the shared clone (HEAD moved mid-review) — their r1 verdicts were interpreted against c7f54f0 accordingly.

Remaining before dispatch (owner): risk-reviewed label on this PR → merge → tag v0.2.1 + Release → create npm-publish environment → wire trusted publisher on the existing @persona-engine/core → dispatch 0.2.1 → approve.