ci: add workflow_dispatch + --force npm upgrade so a failed publish can be retried

Two changes wrapped together because they unblock the same problem.

`npm install -g npm@latest` fails inside the publish job with
`Cannot find module 'promise-retry'` — a known npm self-upgrade bug
where the in-place install removes the running npm's own dependencies
mid-flight. Adding `--force` bypasses that broken state and lets the
install complete.

Re-running the failed workflow uses the workflow file from the original
triggering SHA, so a fix on `main` can't unblock the existing v0.1.1
publish that already failed. Adding a `workflow_dispatch` trigger with
a `publish_tag` input lets the publish job be triggered manually
against any tag: release-please is skipped, checkout uses the input
ref, and the publish job's `if:` condition is widened to allow
workflow_dispatch runs. Filename stays `release-please.yml` so npm
Trusted Publishing still matches.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: jaymaycry

.github/workflows/release-please.yml

@@ -3,6 +3,12 @@ name: Release Please
 on:
   push:
     branches: [main]
+  workflow_dispatch:
+    inputs:
+      publish_tag:
+        description: 'Tag to publish (e.g. v0.1.1). Leave blank to let release-please run normally.'
+        required: false
+        default: ''
 
 permissions:
   contents: write
@@ -12,6 +18,7 @@ jobs:
   release-please:
     name: Release PR / tag
     runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'workflow_dispatch' || inputs.publish_tag == '' }}
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
       tag_name: ${{ steps.release.outputs.tag_name }}
@@ -25,14 +32,16 @@ jobs:
   publish:
     name: Publish to npm
     needs: release-please
-    if: ${{ needs.release-please.outputs.release_created == 'true' }}
+    if: ${{ always() && ((github.event_name == 'workflow_dispatch' && inputs.publish_tag != '') || needs.release-please.outputs.release_created == 'true') }}
     runs-on: ubuntu-latest
     permissions:
       contents: read
       id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.publish_tag || github.ref }}
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -48,7 +57,7 @@ jobs:
         run: yarn prepare
 
       - name: Upgrade npm (Trusted Publishing requires >= 11.5.1)
-        run: npm install -g npm@latest
+        run: npm install -g --force npm@latest
 
       - name: Publish
         run: npm publish --access public