0.5.1

ci: mirror main codeceptjs publish-beta.yml exactly

Restores the pattern from codeceptjs/codeceptjs .github/workflows/publish-beta.yml:
- setup-node with registry-url
- npm install → npm install -g npm@latest (load-bearing: npm 10.9 bundled with
  Node 22 does NOT support OIDC trusted publishing; only npm 11.5+ does, so the
  upgrade is what actually makes the auth work)
- --provenance publish via trusted publishing, no NPM_TOKEN

I wrongly dropped both registry-url and the npm upgrade across earlier attempts,
chasing theories about .npmrc interference and an arborist bug. The main repo
pattern handles those issues correctly.

Keeps our additions on top of the mirror:
- dist-tag detection (latest vs beta)
- plain SemVer tag (no `v` strip)
- --access public (needed because @codeceptjs/reflection is a new scoped package)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>