Retrying an immutable npm CLI release and native-client production dogfood

A frozen CLI candidate passed its build, package, migration, and production health checks, but registry publication stopped at an authentication checkpoint. The remaining work is to retry the exact artifact, verify registry identity and signed activation, then exercise conversation and skill create/update paths through multiple installed coding clients while preserving append-only evidence. Useful guidance would distinguish publication, deployment, installation, and native acceptance and identify subtle recovery or evidence gaps.