ci: add typecheck and test gates to publish workflow

[dmchaledev]

Problem

The publish workflow (publish.yml) skips the quality-gate steps that the CI workflow (ci.yml) always runs. This means a release can reach npm with broken types or failing tests if:

• the tag is pushed manually (bypassing CI), or
• workflow_dispatch is used to trigger a manual publish.

Fix

Add typecheck and test steps between dependency installation and the build, mirroring what ci.yml already does:

- name: Type-check
  run: npm run typecheck

- name: Test
  run: npm test

The job now fails fast before touching the npm registry if either check fails.

Test plan

• Verify CI passes on this PR
• Confirm the publish workflow job order: install → set-version → typecheck → test → build → publish

---

Generated by Claude Code