add release safety guards for npm publishing

sync package version with git tag

prevent duplicate version publish

verify native binaries are included in package

Author: calchiwo

.github/workflows/release-binaries.yml

@@ -131,6 +131,33 @@ jobs:
         working-directory: node_version
         run: npm ci
 
+      - name: Sync version with tag
+        working-directory: node_version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/v}
+          npm version $VERSION --no-git-tag-version
+
+      - name: Check if version exists
+        working-directory: node_version
+        run: |
+          PACKAGE_NAME=$(node -p "require('./package.json').name")
+          VERSION=$(node -p "require('./package.json').version")
+
+          if npm view "$PACKAGE_NAME@$VERSION" version >/dev/null 2>&1; then
+            echo "Version already exists on npm"
+            exit 1
+          fi
+
+      - name: Build package tarball
+        wogsrking-directory: node_version
+        run: npm pack
+
+      - name: Verify package contains native binaries
+        working-directory: node_version
+        run: |
+          TAR=$(ls *.tgz)
+          tar -tf "$TAR" | grep "dist/native" || (echo "Missing native binaries in package" && exit 1)
+
       - name: Package check
         working-directory: node_version
         run: npm pack --dry-run