build: disable nodejs publishing for private package

[MatthiasLew]

Disables nodejs publishing in goal.yaml to resolve diagit SEVERITY_ERROR findings.

[tom-sapletta-com]

Fleet cleanup 2026-08-25: zamknięto bez merge, ponieważ PR nie spełniał bezpiecznej bramki CLEAN + mergeable + checks bez błędów + bezpośredni target main/master. Gałąź pozostaje zachowana do audytu lub późniejszego odzyskania zmian.

[ifuri-validator-agent]

Deterministic Validator approval for exact head 0bc004feddc893cb3154c3eee407f0a84f68e836.

Ticket: ticket-021
Correlation ID: todo2code-pr-96-ticket-021
Model: zai/glm-5.3
Reviewed diff chunks: 1
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 1 diff chunk(s). Single-line config change disabling nodejs publishing in goal.yaml, consistent with stated intent. No failing checks.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-021-2412
TICKET ticket-021
HEAD_SHA 0bc004feddc893cb3154c3eee407f0a84f68e836
CORRELATION_ID todo2code-pr-96-ticket-021
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "MatthiasLew"
INPUT observed_checks = ["governance=SKIPPING","Live OpenRouter contract (opt-in)=SKIPPING","Java adapter (JDK 17 required)=PASS","verify=PASS","koru / code-review=PASS","Java adapter (JDK 17 required)=PASS","verify=PASS","koru / code-review=PASS","Java adapter (JDK 17 required)=PASS","verify=PASS"]
INPUT required_checks = ["verify","Java adapter (JDK 17 required)","koru / code-review"]
INPUT required_checks_source = "protected registry + GitHub applied rules (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"