fix: remove postinstall hook, restore npm ci in release

Align with hotwired-mcp pattern: no postinstall script,
npm ci in CI (deterministic), files array is just bin/ + npm/.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: gold-ak47

.github/workflows/release.yml

@@ -31,7 +31,7 @@ jobs:
           node-version: '20'
 
       - name: Install dependencies
-        run: npm install --omit=optional --ignore-scripts
+        run: npm ci
 
       - name: Semantic Release (dry run)
         id: semantic
@@ -116,7 +116,7 @@ jobs:
           registry-url: 'https://registry.npmjs.org'
 
       - name: Install dependencies
-        run: npm install --omit=optional --ignore-scripts
+        run: npm ci
 
       - name: Download all artifacts
         uses: actions/download-artifact@v4

package-lock.json

@@ -24,12 +24,10 @@
   },
   "files": [
     "bin",
-    "scripts",
     "npm"
   ],
   "scripts": {
-    "test": "cargo test",
-    "postinstall": "node scripts/postinstall.js"
+    "test": "cargo test"
   },
   "optionalDependencies": {
     "@treble-app/cli-darwin-arm64": "1.0.0",