build(release): publish the vendored framework and the native packages publicly

The three release sequences shipped with publishConfig.access: restricted, so
nothing in the @deepseek-ai scope was installable from outside the organization.

A restricted dependency is what actually blocks a public consumer: every harness
package declares the vendored framework as a peerDependency, and
dsh-sandbox-local declares the Landlock entry as a dependency. Those two
sequences therefore go public first — the nine vendor/* packages and the three
native/landlock-run packages — while the dsh family stays restricted until its
own sequence is opened deliberately. No public package requires a restricted one
in this arrangement.

Access is now per sequence, so no publish path can pass --access: one flag
cannot express two levels and would override the manifest that owns the fact.
publish.ts stops passing it, matching the native workflow, and
check-workspace-constraints holds each manifest to its own sequence's level,
which is what stops the scope from drifting one package at a time.

Harness consumers reference the Landlock entry as workspace:^ instead of
workspace:*, so a published harness package accepts the entry's patch and minor
releases. The entry keeps workspace:* for its platform packages, where the
binary must match the entry version exactly.

Two rationales that named a private registry no longer describe the vendored
sequence; they now state the durable reason, which is that the verification must
not depend on the registry already carrying matching versions.

pnpm-lock.yaml

@@ -1124,12 +1124,6 @@ importers:
       '@deepseek-ai/dsh-subagent':
         specifier: workspace:^
         version: link:../../subagent/subagent
-      '@deepseek-ai/dsh-subagent-claude-code':
-        specifier: workspace:^
-        version: link:../../subagent/subagent-claude-code
-      '@deepseek-ai/dsh-subagent-codex':
-        specifier: workspace:^
-        version: link:../../subagent/subagent-codex
       '@deepseek-ai/dsh-subagent-fork-in-process':
         specifier: workspace:^
         version: link:../../subagent/subagent-fork-in-process
@@ -3922,7 +3916,7 @@ importers:
         specifier: workspace:^
         version: link:../../core/tools
       '@deepseek-ai/node-addon-landlock-run':
-        specifier: workspace:*
+        specifier: workspace:^
         version: link:../../../native/landlock-run/packages/entry
 
   packages/examples/jsonrpc-demo:
@@ -5661,7 +5655,7 @@ importers:
         specifier: workspace:^
         version: link:../sandbox-windows-acl
       '@deepseek-ai/node-addon-landlock-run':
-        specifier: workspace:*
+        specifier: workspace:^
         version: link:../../../native/landlock-run/packages/entry
       '@deepseek-ai/schemastery':
         specifier: link:../../../vendor/schemastery
@@ -6451,7 +6445,7 @@ importers:
         specifier: workspace:^
         version: link:../../subprocess/subprocess-local
       '@deepseek-ai/node-addon-landlock-run':
-        specifier: workspace:*
+        specifier: workspace:^
         version: link:../../../native/landlock-run/packages/entry
 
   packages/shell/pwsh-local: