chore: verify published package contents

[benbrandt]

Summary

• exclude compiled tests, examples, and test-support helpers from npm packages
• verify every public export target and schema asset is present
• reject files outside the package allowlist
• run the package check in CI and immediately before publish

Testing

• npm run package:check (83 packaged files)
• npm run check (834 tests)