release: make staged intent crash-safe

[0thernet]

Summary

• record a durable version-bound intent immediately before npm staging
• scan all retained attempts so failed or ambiguous writes stay locked
• add exact resolution accounting and document the npm OIDC read limitation

Verification

• bun run check
• 1,240 tests passed in the aggregate repository gate
• focused workflow tests: 26 passed, 401 assertions