Publish the CLI from package-specific tags

[Mathieu2301]

What

• teach the existing release workflow to publish packages/cli from cli-v* tags
• keep root v* releases unchanged
• document both tag forms

Why

The human onboarding now instructs npm i -g @miakapp/cli, but the release workflow could only publish the root miakapi package.

Proof

• bun run check (310 tests, Node/browser smoke, coordinator contract, pack check)
• tag/version matching remains fail-closed before npm publish
• no npm credential is exposed to this session