fix: unblock release publication workflows

[iHildy]

Summary

• defer parsing the release PR payload until the prerelease dispatch step actually runs
• grant the post-publish smoke workflow permission to download Actions artifacts
• restore formatter-normalized package.json layout after the generated release PR #38
• add regression coverage for both workflow failures

Verification

• bun run check
• bun test (195 passed)
• bun run build
• actionlint on the release, publish, and smoke workflows
• isolated two-instance GitHub E2E passed

Failure evidence

• release dispatch failure
• publish workflow startup failure