fix(ci): download artifact before pnpm setup in publish job

The publish job has no checkout step and resolves the pnpm version
from package.json's packageManager field. Setup pnpm ran before the
artifact was downloaded, so no package.json existed yet, causing
"No pnpm version is specified". Reorder so the artifact (which
contains package.json) is downloaded first.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: Light2Dark

.github/workflows/release.yml

@@ -80,6 +80,11 @@ jobs:
       id-token: write
       contents: read
     steps:
+      - name: 📥 Download package artifact
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: package
+
       - name: ⎔ Setup pnpm
         uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6
 
@@ -89,11 +94,6 @@ jobs:
           node-version: 24
           registry-url: 'https://registry.npmjs.org'
 
-      - name: 📥 Download package artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
-        with:
-          name: package
-
       - name: 📦 Publish to NPM
         run: pnpm publish --no-git-checks --ignore-scripts
         env: