docs: add publication log template

[saagpatel]

What

• Added docs/demo/publication-log.md to capture published URLs or sent-channel notes after sharing the portfolio package.
• Linked the publication log from the outbound share package and portfolio handoff bundle.
• Added safe capture rules and examples that avoid recording private recipients, replies, workspace data, credentials, or real ticket details.

Why

The outbound package is ready to send, but the repo needed a durable place to record where it was posted or sent without leaking private contact data or burying status in chat.

How

• Added pending rows for portfolio site, LinkedIn post, email packet, short DM, and video post.
• Added a published-entry template with safety-check fields.
• Added examples for a public portfolio URL and a private DM sent-channel note.

Testing

• pnpm exec prettier --check docs/demo/publication-log.md docs/demo/outbound-share-package.md docs/demo/portfolio-handoff-bundle.md
• Publication-log and outbound-package link/path existence check.
• Sanitized boundary scans for private/company placeholders and stale device-policy examples.
• Stale text scan for fixed test counts, old gap labels, stale deck-preview notes, public PPTX links, hype words, and direct email markers.
• pdfinfo sanity checks for one-pager and deck PDFs.
• sips dimension check for screenshot contact sheet.
• node scripts/ci/check-workstation-preflight.mjs
• node scripts/ci/check-workflow-command-drift.mjs
• node scripts/ci/check-version-parity.mjs
• git diff --check
• Git branch, atomic, generated, large-file, and secrets guards.

Risks

Low. Documentation-only change. The publication log is intentionally pending until a real destination/channel is chosen.

Performance impact

None expected. Documentation-only change; no runtime, bundle, API, database, or UI behavior changed.

Lockfile rationale

No lockfiles changed.

Screenshots

Not applicable. Documentation-only change; no UI surface changed.