build(release): publish the vendored framework and the native packages publicly

The three release sequences shipped with publishConfig.access: restricted, so
nothing in the @deepseek-ai scope was installable from outside the organization.

A restricted dependency is what actually blocks a public consumer: every harness
package declares the vendored framework as a peerDependency, and
dsh-sandbox-local declares the Landlock entry as a dependency. Those two
sequences therefore go public first — the nine vendor/* packages and the three
native/landlock-run packages — while the dsh family stays restricted until its
own sequence is opened deliberately. No public package requires a restricted one
in this arrangement.

Access is now per sequence, so no publish path can pass --access: one flag
cannot express two levels and would override the manifest that owns the fact.
publish.ts stops passing it, matching the native workflow, and
check-workspace-constraints holds each manifest to its own sequence's level,
which is what stops the scope from drifting one package at a time.

Harness consumers reference the Landlock entry as workspace:^ instead of
workspace:*, so a published harness package accepts the entry's patch and minor
releases. The entry keeps workspace:* for its platform packages, where the
binary must match the entry version exactly.

Two rationales that named a private registry no longer describe the vendored
sequence; they now state the durable reason, which is that the verification must
not depend on the registry already carrying matching versions.

vendor/cordis/package.json

@@ -3,7 +3,7 @@
   "description": "Meta-Framework for Modern JavaScript Applications",
   "version": "4.0.1-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/cosmokit/package.json

@@ -3,7 +3,7 @@
   "description": "A collection of common utilities",
   "version": "1.8.2-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/group/package.json

@@ -3,7 +3,7 @@
   "description": "Nested plugin group for cordis",
   "version": "1.0.1-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/hmr/package.json

@@ -3,7 +3,7 @@
   "description": "Hot Module Replacement Plugin for Cordis",
   "version": "1.0.16-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/include/package.json

@@ -3,7 +3,7 @@
   "description": "Include files in cordis configurations",
   "version": "1.0.6-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/loader/package.json

@@ -3,7 +3,7 @@
   "description": "Plugin loader for cordis",
   "version": "1.0.2-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/logger-console/package.json

@@ -3,7 +3,7 @@
   "description": "Console logger exporter for cordis",
   "version": "1.0.1-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/schemastery/package.json

@@ -3,7 +3,7 @@
   "description": "Type driven schema validator",
   "version": "3.18.1-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",

vendor/timer/package.json

@@ -3,7 +3,7 @@
   "description": "Timer service for cordis",
   "version": "1.1.3-rc.4",
   "publishConfig": {
-    "access": "restricted"
+    "access": "public"
   },
   "repository": {
     "type": "git",