fix(publish): atomic bump+publish per scope with should-publish filter

[MisaelMa]

Summary

• github-actions.js: removed bump loop, now only computes and outputs filtered scopes (excludes shouldPublish: false)
• publish.yml: bump+publish is now atomic per scope — if publish fails, git checkout -- . reverts that scope's changes while staged (successful) changes are preserved
• version-policies.json + package.json: synced 6 packages with npm (xml, complementos, xsd, csd, csf, catalogos) to match published -dev.1 versions
• 15 empty commits to trigger publish for all publishable packages

Key changes

• getDependences('utils') includes pdf but it gets filtered out because pdf has shouldPublish: false
• If a scope fails to publish, its version bump is reverted — only successful publishes get committed
• git add -A after each successful publish stages changes; git checkout -- . after failure reverts unstaged changes

Test plan

• Verify publishable scopes log excludes pdf, cancelacion, designs, etc.
• Verify all 15 publishable scopes bump and publish successfully
• Verify failed scopes get reverted (no orphan version bumps)