Fixed

• Skip npm install for sub-workspaces already covered by root install (only run if workspace has its own package-lock.json).
• publish:local script now unpublishes first for idempotent republish to Verdaccio.