fix: automatically recover Marketplace publishing - #107

Summary

• reconcile the newest stable GitHub release with Visual Studio Marketplace every hour
• reuse and verify the canonical release VSIX, then compare its SHA-256 with the Marketplace artifact
• serialize registry delivery and update the publishing CLI to @vscode/vsce 4.0.0 on Node 22

Why

Visual Studio Marketplace Gallery outages can outlast the fast retry window in the release job. The release job should continue to report an incomplete delivery honestly, while a bounded scheduled reconciler restores the missing Marketplace version without a manual upload.

Validation

• full test suite: 1,034 passed, 1 skipped, 0 failed
• workflow policy tests passed
• VSIX packaging and verification smoke test passed
• dry-run reconciliation confirmed the v2.3.3 release and Marketplace SHA-256 match