fix(ci): publish-astro must build @run402/sdk before tsc -p astro

astro now imports types from @run402/sdk (the new ./release-slice helper)
so a fresh npm ci leaves sdk/dist missing, and the type-check step fails
finding "@run402/sdk" / "@run402/sdk/node" module types. Adds a build:core
+ build:sdk step between npm ci and the type-check so the dist tree
referenced by @run402/sdk's `types` entry exists when tsc walks the
astro project.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: MajorTal

.github/workflows/publish-astro.yml

@@ -105,6 +105,17 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Build @run402/sdk + core
+        # The astro package imports types from `@run402/sdk` (e.g. the
+        # release-slice helper, v1.1.0+). `@run402/sdk`'s `types` entry
+        # points at `sdk/dist/` which doesn't exist after a fresh `npm ci`,
+        # so the subsequent `tsc -p astro` would fail to resolve those
+        # imports. Building core + sdk first stages the dist tree the
+        # workspace symlink hands to TypeScript's module resolver.
+        run: |
+          npm run build:core
+          npm run build:sdk
+
       - name: Lint + type-check
         run: npx tsc --noEmit -p astro