test: expand post-publish registry smoke to full publish manifest

[jithinraj]

Summary

Expands the post-publish registry smoke test from a representative subset to the full publish manifest. This strengthens post-publish install-surface proof for packages whose dependency graph is only fully resolvable from the registry.

This PR:

• reads package targets from scripts/publish-manifest.json
• verifies ESM import, CJS require, TypeScript types, and CLI bins for published packages
• checks installed packages for unresolved workspace:* dependencies
• retains a --representative fast path for quick validation
• correctly handles ESM-only packages and CLI-only packages

No runtime behavior, protocol surface, or public API contract is changed by this PR.

Changes

• scripts/release/pack-install-smoke-registry.sh
  • manifest-driven package list by default
  • --representative fast path
  • workspace dependency check
  • local bin verification
  • end-of-run summary
  • correct handling for ESM-only and CLI-only packages

Validation

Representative run (--dist-tag latest --representative):

• 5/5 packages passed
• workspace dependency check clean

Full manifest run (--dist-tag latest):

• 28/28 packages passed
• 3 packages with bins verified
• 1 ESM-only package handled correctly
• 1 CLI-only package handled correctly
• no unresolved workspace:* dependencies

Full repo checks pass:

• lint
• build
• test
• guard

Closes #487