Honor exact declared release versions

[sambitcreate]

Summary

• publish the complete package.json SemVer exactly instead of replacing its patch with a workflow run number
• make an existing exact tag a green release no-op
• gate every expensive/signing/publication step on that selection and document the explicit bump policy

Verification

• node --test scripts/prepare-ci-release.test.mjs scripts/check-release-consumers.test.mjs
• node --test scripts/run-macos-distribution.test.mjs
• npm run test:branding
• npm run test:diagnostics
• npm run type-check
• npm run lint

v0.35.76 is intentionally left untouched; this policy applies to future releases.

[pullfrog]

no API key found — this repo is configured to use deepseek/deepseek-v4-pro, which needs DEEPSEEK_API_KEY, but the runner has no key for it.

To fix: add the key as a GitHub Actions secret (referenced from your workflow's env: block) or as a Pullfrog secret in the console — or switch this repo to a different model (free models need no key).

Open repo secrets → · Configure model → · Setup docs → · Ask in Discord →

  ^{｜ Rerun failed job ➔ ｜ View workflow run ｜ via Pullfrog ｜ Using DeepSeek Pro ｜ 𝕏}