chore: add guarded remote publish command

[roackb2]

Summary

• add yarn remote:publish for publishing @roackb2/heddle-remote
• rebuild, version-check, dependency-check, and compile the remote package before npm runs
• document the command and npm flag passthrough in the release runbook

Publication remains an explicit operator action; this command does not alter the release sequence or publish the root package.

Verification

• yarn remote:publish --dry-run
• confirmed the generated 4.3.0 artifact matches the published remote package shape (19 files, 12.0 kB)