Run rc publishing through repo-local CI tools

The first rc workflow run exposed two CI-only release hazards: the generic publish workflow would still match prerelease tags, and GitHub runner global tools made npm/tsc resolution brittle. The release workflows now avoid npm self-upgrade, the stable publisher skips prerelease tags, and CI invokes the repo-local TypeScript/test commands.

Constraint: RC publishing must happen from CI without promoting latest
Rejected: Keep using global tsc | runner versions produced false TypeScript failures despite local dependencies being installed
Rejected: npm install -g npm@latest | runner npm self-upgrade failed before validation could run
Confidence: high
Scope-risk: narrow
Tested: npm exec tsc -- --noEmit; npm run check; YAML parse for CI/publish/rc-release workflows; prettier --check .github/workflows/*.yml
Not-tested: Successful CI publish after tag repush

Author: xycld

.github/workflows/ci.yml

@@ -21,10 +21,10 @@ jobs:
           node-version: ${{ matrix.node-version }}
           cache: npm
       - run: npm ci
-      - run: tsc --noEmit
+      - run: npm exec tsc -- --noEmit
       - run: npm run lint
       - run: npm run format:check
-      - run: npx vitest run
+      - run: npm test
       - name: Coverage report
         if: matrix.node-version == 22
         run: npx vitest run --coverage --test-timeout=30000
@@ -39,7 +39,7 @@ jobs:
           node-version: 22
           cache: npm
       - run: npm ci
-      - run: tsc
+      - run: npm run build
       - name: Verify CLI entry point exists
         run: test -f dist/packages/cli/index.js
       - name: Smoke test

.github/workflows/publish.yml

@@ -18,7 +18,6 @@ jobs:
           node-version: 22
           cache: npm
           registry-url: https://registry.npmjs.org
-      - run: npm install -g npm@latest
       - run: npm ci
       - run: npm run build
       - run: npx vitest run

.github/workflows/rc-release.yml

@@ -44,7 +44,6 @@ jobs:
           node-version: 22
           cache: npm
           registry-url: https://registry.npmjs.org
-      - run: npm install -g npm@latest
       - run: npm ci
       - name: Verify RC tag and package metadata
         run: |