fix(ci): publish the npm tarball by path, not as a GitHub shorthand

`npm publish dist/x.tgz` has no leading ./, so npm parses the slash as an
owner/repo shorthand and tries `git ls-remote ssh://git@github.com/dist/x.tgz.git`.
pi-v0.1.0 was the first tag to reach this job — it has been broken for every
npm package since the workflow was written.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SqmbqWDtNexzDfH5V3BMRz

Author: JuliusBrussee

.github/workflows/release-packages.yml

@@ -190,7 +190,7 @@ jobs:
         run: |
           set -euo pipefail
           npm install --global npm@11.5.1
-          npm publish dist/*.tgz --access public
+          npm publish ./dist/*.tgz --access public
 
   publish-pypi:
     if: needs.build.outputs.ecosystem == 'pypi'