shipcheck

Release verification: git tag, release, npm, MCP Registry, and GHCR must agree, or NO-GO.